CVE-2026-71911

Name of the Vulnerable Software and Affected Versions DrayTek VigorAP (affected versions not specified)

Description A buffer overflow exists in the setLan() function due to missing length checks during memory copy operations. This issue affects the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker with valid administrative credentials for the web management interface can provide crafted input to cause a denial of service or execute arbitrary commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.