Strix
64.8K

CVE-2026-71927

HIGHCVSS 7.2/10EPSS 1.67%

Last modified

CVE-2026-71927 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. EPSS estimates a 1.67% chance of exploitation in the next 30 days.

Description

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary commands with root privileges. Exploitation requires valid administrative credentials for the device's web management interface.

Metrics

CVSS 3.1
7.2/10

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS 4.0
8.6/10

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Probability
1.67%

75.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
DrayTek CorporationVigorSwitch G2540xs< 3.9.10
DrayTek CorporationVigorSwitch P2540xs< 3.9.10
DrayTek CorporationVigorSwitch FX2120< 3.9.10
DrayTek CorporationVigorSwitch G2282x< 2.10.6
DrayTek CorporationVigorSwitch P2282x< 2.10.6
DrayTek CorporationVigorSwitch Q2300x< 2.10.7
DrayTek CorporationVigorSwitch PQ2300xb< 2.10.7
DrayTek CorporationVigorSwitch G2542x< 3.10.6
DrayTek CorporationVigorSwitch P2542x< 3.10.6
DrayTek CorporationVigorSwitch P2542xh< 3.10.6
DrayTek CorporationVigorSwitch PX2060< 2.9.10
DrayTek CorporationVigorSwitch G1280< 2.9.10
DrayTek CorporationVigorSwitch P1280< 2.9.10
DrayTek CorporationVigorSwitch P1281x< 2.9.10
DrayTek CorporationVigorSwitch G1282< 2.9.10
DrayTek CorporationVigorSwitch P1282< 2.9.10
DrayTek CorporationVigorSwitch G2121< 2.9.10
DrayTek CorporationVigorSwitch P2121< 2.9.10
DrayTek CorporationVigorSwitch PQ2121x< 2.9.10
DrayTek CorporationVigorSwitch Q2121x< 2.9.10
DrayTek CorporationVigorSwitch G2280x< 2.9.10
DrayTek CorporationVigorSwitch P2280x< 2.9.10
DrayTek CorporationVigorSwitch Q2200x< 2.9.10
DrayTek CorporationVigorSwitch PQ2200xb< 2.9.10
DrayTek CorporationVigorSwitch G2100< 2.9.10
DrayTek CorporationVigorSwitch P2100< 2.9.10
DrayTek CorporationVigorSwitch G2540x< 2.9.10
DrayTek CorporationVigorSwitch P2540x< 2.9.10

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2026-71927?
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary commands with root privileges. Exploitation requires valid administrative credentials for the device's web management interface.
How severe is CVE-2026-71927?
CVE-2026-71927 has a CVSS score of 7.2/10 (HIGH severity). The EPSS model estimates a 1.67% probability of exploitation in the next 30 days.
How do I fix CVE-2026-71927?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-71927?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST