CVE-2026-71933 — DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A r…
Published: 2026-08-24 · CVSS: 8.8 · CVSS 4.0
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save startup configuration, or clear logs.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7