CVE-2026-71932

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch (affected versions not specified)

Description Multiple models contain a directory traversal issue in the getSyslogFile() function. This occurs due to insufficient validation of the option field, allowing a remote attacker with valid administrative credentials for the web management interface to use path traversal sequences to access arbitrary files on the device. Directory traversal is a flaw that allows an attacker to read files outside the intended directory by using special characters like dot-dot-slash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.