EXPOSURES › CVE-2026-71933

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save startup configuration, or clear logs.