High severity7.5NVD Advisory· Published Aug 24, 2026· Updated Aug 26, 2026
CVE-2026-71922
CVE-2026-71922
Description
Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validation when the pass field is absent. A remote attacker can trigger this vulnerability via a crafted request to crash the service and cause a denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
1- DrayTek VigorSwitch: 25 Vulnerabilities Including Critical Command Injection Disclosed TogetherVypr Intelligence · Aug 24, 2026