CVE-2026-71914
CriticalCVSS 9.8Summary
Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component. The vulnerability is caused by insufficient validation of UDP message content after START_SPEED_TEST before command execution. A remote attacker can trigger this vulnerability via a crafted message to execute arbitrary commands with root privileges.
Risk Assessment
A remote attacker can gain full control of the access point by executing arbitrary commands with administrator privileges, potentially leading to device takeover and network security compromise.
Recommendation
Update DrayTek VigorAP firmware to the latest version that includes input validation fixes.
Original NVD description (English source)
Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component. The vulnerability is caused by insufficient validation of UDP message content after START_SPEED_TEST before command execution. A remote attacker can trigger this vulnerability via a crafted message to execute arbitrary commands with root privileges.