🔐 CVE Alert

CVE-2026-71911

HIGH 7.2

DrayTek VigorAP Multiple Models Buffer Overflow via setLan

CVSS Score
7.2
EPSS Score
0.0%
EPSS Percentile
0th

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service or potentially executing arbitrary commands. Exploitation requires valid administrative credentials for the device's web management interface.

CWE CWE-120
Vendor draytek corporation
Product vigorap 918r
Published Aug 24, 2026
Stay Ahead of the Next One

Get instant alerts for draytek corporation vigorap 918r

Be the first to know when new high vulnerabilities affecting draytek corporation vigorap 918r are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

DrayTek Corporation / VigorAP 918R
0 < 1.4.11
DrayTek Corporation / VigorAP 960C
0 < 1.4.12
DrayTek Corporation / VigorAP 1060C
0 < 1.4.12
DrayTek Corporation / VigorAP 906
0 < 1.4.13
DrayTek Corporation / VigorAP 912C
0 < 1.4.15
DrayTek Corporation / VigorAP 903
0 < 1.4.22

References

NVD ↗ CVE.org ↗ EPSS Data ↗
draytek.com: https://www.draytek.com/about/security-advisory/multiple-remote-code-execution-and-buffer-overflow-vulnerabilities-in-vigorap-series-august-2026/ vulncheck.com: https://www.vulncheck.com/advisories/draytek-vigorap-multiple-models-buffer-overflow-via-setlan

Credits

Jincheng Wang (@winmt) Le Yu (Nanjing University of Posts and Telecommunications) Xiapu Luo (The Hong Kong Polytechnic University)