Is CVE-2026-71933 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-71933?

CVE-2026-71933 has a CVSS v3 severity of CRITICAL (9.1).

Back

CVE-2026-71933

Description

Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save startup configuration, or clear logs.