Beveiligingsadvies

CVE-2026-71914

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-24 17:07:46

Laatst bijgewerkt 2026-08-24 19:53:39

Toegewezen door VulnCheck

CVSS-score 9.8

Status PUBLISHED

Beschrijving

Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component. The vulnerability is caused by insufficient validation of UDP message content after START_SPEED_TEST before command execution. A remote attacker can trigger this vulnerability via a crafted message to execute arbitrary commands with root privileges.

← Alle CVE's bekijken Bekijk op cve.org ↗