NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in DrayTek VigorAP
view advisory published 2026-08-26
DrayTek heeft meerdere kwetsbaarheden verholpen in de VigorAP productlijn.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-71914US | critical9.8 | — | ||
Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component. The vulnerability is caused by insufficient validation of UDP message content a… | ||||
| CVE-2026-71913US | high7.2 | — | ||
Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. The vulnerability is caused by insufficient filtering before the res… | ||||
| CVE-2026-71912US | high7.2 | — | ||
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operatio… | ||||
| CVE-2026-71911US | high7.2 | — | ||
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations i… | ||||
| CVE-2026-71910US | high7.2 | — | ||
Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function. The vulnerability is caused by insufficient validation of the CMD0, CMD3, and… | ||||
| CVE-2026-71909US | high7.2 | — | ||
Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function. The vulnerability is caused by insufficient filtering of the time field befor… | ||||
| CVE-2026-71908US | high7.2 | — | ||
Multiple DrayTek VigorAP models contain a command injection vulnerability in the mesh_start_speed_test function. The vulnerability is caused by insufficient sanitization of the mes… | ||||
| CVE-2026-71907US | high7.2 | — | ||
Multiple DrayTek VigorAP models contain a command injection vulnerability in the setcamset function. The vulnerability is caused by insufficient filtering of the selectSlaves field… | ||||
| CVE-2026-71906US | high7.2 | — | ||
Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerability is caused by insufficient validation of the lanIp and lanNetmask… | ||||
| CVE-2026-71905US | high7.2 | — | ||
Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey, ba… | ||||
| CVE-2026-71904US | high7.2 | — | ||
Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous charac… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan