Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.6

DrayTek VigorSwitch lets attacker run commands as root

CVE-2026-71926 · published 2 months ago
Summary

Several VigorSwitch models (G2540xs, P2540xs, FX2120, G2282x, P2282x) do not properly clean the username, password and location fields entered in the web admin page. If an attacker obtains a valid admin login, they can insert specially crafted input and cause the device to execute any command with full system privileges. Protect the devices by changing default passwords, limiting admin access to trusted users, and applying the latest firmware updates from DrayTek.

What to do
  • Update draytek corporation vigorswitch g2540xs to version 3.9.10 or later.
  • Update draytek corporation vigorswitch p2540xs to version 3.9.10 or later.
  • Update draytek corporation vigorswitch fx2120 to version 3.9.10 or later.
  • Update draytek corporation vigorswitch g2282x to version 2.10.6 or later.
  • Update draytek corporation vigorswitch p2282x to version 2.10.6 or later.
  • Update draytek corporation vigorswitch q2300x to version 2.10.7 or later.
  • Update draytek corporation vigorswitch pq2300xb to version 2.10.7 or later.
  • Update draytek corporation vigorswitch g2542x to version 3.10.6 or later.
  • Update draytek corporation vigorswitch p2542x to version 3.10.6 or later.
  • Update draytek corporation vigorswitch p2542xh to version 3.10.6 or later.
  • Update draytek corporation vigorswitch px2060 to version 2.9.10 or later.
  • Update draytek corporation vigorswitch g1280 to version 2.9.10 or later.
  • Update draytek corporation vigorswitch p1280 to version 2.9.10 or later.
  • Update draytek corporation vigorswitch p1281x to version 2.9.10 or later.
  • Update draytek corporation vigorswitch g1282 to version 2.9.10 or later.
  • Update draytek corporation vigorswitch p1282 to version 2.9.10 or later.
  • Update draytek corporation vigorswitch g2121 to version 2.9.10 or later.
  • Update draytek corporation vigorswitch p2121 to version 2.9.10 or later.
  • Update draytek corporation vigorswitch pq2121x to version 2.9.10 or later.
  • Update draytek corporation vigorswitch q2121x to version 2.9.10 or later.
  • Update draytek corporation vigorswitch g2280x to version 2.9.10 or later.
  • Update draytek corporation vigorswitch p2280x to version 2.9.10 or later.
  • Update draytek corporation vigorswitch q2200x to version 2.9.10 or later.
  • Update draytek corporation vigorswitch pq2200xb to version 2.9.10 or later.
  • Update draytek corporation vigorswitch g2100 to version 2.9.10 or later.
  • Update draytek corporation vigorswitch p2100 to version 2.9.10 or later.
  • Update draytek corporation vigorswitch g2540x to version 2.9.10 or later.
  • Update draytek corporation vigorswitch p2540x to version 2.9.10 or later.
Affected software
VendorProductAffected versions
draytek corporation vigorswitch g2540xs < 3.9.10
draytek corporation vigorswitch p2540xs < 3.9.10
draytek corporation vigorswitch fx2120 < 3.9.10
draytek corporation vigorswitch g2282x < 2.10.6
draytek corporation vigorswitch p2282x < 2.10.6
draytek corporation vigorswitch q2300x < 2.10.7
draytek corporation vigorswitch pq2300xb < 2.10.7
draytek corporation vigorswitch g2542x < 3.10.6
draytek corporation vigorswitch p2542x < 3.10.6
draytek corporation vigorswitch p2542xh < 3.10.6
draytek corporation vigorswitch px2060 < 2.9.10
draytek corporation vigorswitch g1280 < 2.9.10
draytek corporation vigorswitch p1280 < 2.9.10
draytek corporation vigorswitch p1281x < 2.9.10
draytek corporation vigorswitch g1282 < 2.9.10
draytek corporation vigorswitch p1282 < 2.9.10
draytek corporation vigorswitch g2121 < 2.9.10
draytek corporation vigorswitch p2121 < 2.9.10
draytek corporation vigorswitch pq2121x < 2.9.10
draytek corporation vigorswitch q2121x < 2.9.10
draytek corporation vigorswitch g2280x < 2.9.10
draytek corporation vigorswitch p2280x < 2.9.10
draytek corporation vigorswitch q2200x < 2.9.10
draytek corporation vigorswitch pq2200xb < 2.9.10
draytek corporation vigorswitch g2100 < 2.9.10
draytek corporation vigorswitch p2100 < 2.9.10
draytek corporation vigorswitch g2540x < 2.9.10
draytek corporation vigorswitch p2540x < 2.9.10
Original advisory text
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitization of the username, password, and loca...
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitization of the username, password, and location fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary commands with root privileges. Exploitation requires valid administrative credentials for the device's web management interface.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.6 High
Exploitation
2% chance of attack within 30 days
Type
CWE-78OS Command Injection
Timeline
Published24 Aug 2026
Updated29 Oct 2026
First seen24 Aug 2026
Sources
CVE-2026-71926 · NVD
CVE-2026-71926 · MITRE
Track software like this
Free during beta