CVE-2026-71935

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch (affected versions not specified)

Description A buffer overflow exists in the webBackupAction() function. This issue occurs due to repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack buffers without verifying the total length. A remote attacker with valid administrative credentials for the web management interface can provide crafted input to trigger a denial of service or potentially execute arbitrary commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.