CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 09:23 UTC )
This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product draytek:vigorswitch_p2542x . Show all products
29 CVEs, showing 1 to 29
CVE Severity Title Published CVE-2026-71943 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via setDevNet Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71942 High 7.2 DrayTek VigorSwitch Multiple Models Buffer Overflow via mail_mailalert Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71941 High 7.2 DrayTek VigorSwitch Multiple Models Buffer Overflow via diag_logmail Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71940 High 7.2 DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Edit ACE Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71939 High 7.2 DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Add ACE Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71938 High 7.2 DrayTek VigorSwitch Multiple Models Buffer Overflow via switch_lan_gvrp Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71937 High 7.2 DrayTek VigorSwitch Multiple Models Buffer Overflow via poe_schedule_profile Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71936 High 7.2 DrayTek VigorSwitch Multiple Models Buffer Overflow via sysreboot Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71935 High 7.2 DrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupAction Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71934 High 7.2 DrayTek VigorSwitch Multiple Models Buffer Overflow via pingtrace Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71933 Critical 9.1 DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71932 Medium 4.9 DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71931 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via tftp_upgrade Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71930 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via setTime Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71929 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via setDevProto Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71928 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via fdftDevice Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71927 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via rebDevice Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71926 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via setDevice Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71925 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via getDetail Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71924 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via getVid Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71923 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via auth_set Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71922 High 7.5 DrayTek VigorSwitch Multiple Models Pre-Authentication NULL Pointer Dereference via setget.cgi Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71921 Critical 9.8 DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgi Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71920 Medium 4.9 DrayTek VigorSwitch Multiple Models NULL Pointer Dereference via formlogout Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71919 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via sysreboot Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71918 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via webBackupAction Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71917 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via pingtrace Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71916 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via commandTable Assigned by VulnCheck
Aug 24, 2026 CVE-2026-71915 High 7.2 DrayTek VigorSwitch Multiple Models OS Command Injection via jsonstatus Assigned by VulnCheck
Aug 24, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
