CVE-2026-71935: DrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupAction
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack buffers without total length checks. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service or potentially executing arbitrary commands. Exploitation requires valid administrative credentials for the device's web management interface.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker must be able to reach the device's web management interface and possess valid administrative credentials. The issue can be triggered remotely with crafted input to the affected fields.
What could exploitation allow?
Successful exploitation can cause a denial of service and may potentially allow arbitrary command execution. The reported impact includes compromise of confidentiality, integrity, and availability.
How can I identify potentially affected devices?
Identify DrayTek VigorSwitch devices in your environment and determine whether their web management interfaces are accessible to remote users or accounts with administrative credentials. The provided data does not identify specific affected models or firmware versions.