# DrayTek VigorSwitch G2100 vulnerabilities Source: https://junglewise.ai/threats/technologies/vigorswitch-g2100 Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/vigorswitch-g2100.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 29 vulnerabilities in DrayTek VigorSwitch G2100: 0 in the last 7 days and 29 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-71943, was published on 24 August 2026. Nothing was published in the last eight weeks. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 29 - All time: 29 (2 critical, 0 exploited in the wild) ## About DrayTek VigorSwitch G2100 DrayTek managed Gigabit Ethernet switch for small to medium business networks. ## Latest DrayTek VigorSwitch G2100 vulnerabilities - [CVE-2026-71943: DrayTek VigorSwitch command injection in setDevNet](https://junglewise.ai/threats/cve-2026-71943-draytek-vigorswitch-command-injection-in-setdevnet) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71942: DrayTek VigorSwitch buffer overflow in mail_mailalert](https://junglewise.ai/threats/cve-2026-71942-draytek-vigorswitch-buffer-overflow-in-mail-mailalert) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71941: DrayTek VigorSwitch buffer overflow in diag_logmail](https://junglewise.ai/threats/cve-2026-71941-draytek-vigorswitch-buffer-overflow-in-diag-logmail) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71940: DrayTek VigorSwitch buffer overflow in acl_general_setup Edit ACE](https://junglewise.ai/threats/cve-2026-71940-draytek-vigorswitch-buffer-overflow-in-acl-general-setup-edit-ace) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71939: DrayTek VigorSwitch buffer overflow in acl_general_setup](https://junglewise.ai/threats/cve-2026-71939-draytek-vigorswitch-buffer-overflow-in-acl-general-setup) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71938: DrayTek VigorSwitch buffer overflow in switch_lan_gvrp](https://junglewise.ai/threats/cve-2026-71938-draytek-vigorswitch-buffer-overflow-in-switch-lan-gvrp) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71937: DrayTek VigorSwitch buffer overflow in poe_schedule_profile](https://junglewise.ai/threats/cve-2026-71937-draytek-vigorswitch-buffer-overflow-in-poe-schedule-profile) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71936: DrayTek VigorSwitch buffer overflow in sysreboot function](https://junglewise.ai/threats/cve-2026-71936-draytek-vigorswitch-buffer-overflow-in-sysreboot-function) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71935: DrayTek VigorSwitch buffer overflow in webBackupAction](https://junglewise.ai/threats/cve-2026-71935-draytek-vigorswitch-buffer-overflow-in-webbackupaction) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71934: DrayTek VigorSwitch buffer overflow in pingtrace](https://junglewise.ai/threats/cve-2026-71934-draytek-vigorswitch-buffer-overflow-in-pingtrace) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71933: DrayTek VigorSwitch missing authorization in syslog functions](https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions) (critical, CVSS 9.1, published 24 Aug 2026) - [CVE-2026-71932: DrayTek VigorSwitch directory traversal in getSyslogFile](https://junglewise.ai/threats/cve-2026-71932-draytek-vigorswitch-directory-traversal-in-getsyslogfile) (medium, CVSS 4.9, published 24 Aug 2026) - [CVE-2026-71931: DrayTek VigorSwitch command injection in tftp_upgrade](https://junglewise.ai/threats/cve-2026-71931-draytek-vigorswitch-command-injection-in-tftp-upgrade) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71930: DrayTek VigorSwitch command injection in setTime function](https://junglewise.ai/threats/cve-2026-71930-draytek-vigorswitch-command-injection-in-settime-function) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71929: DrayTek VigorSwitch command injection in setDevProto](https://junglewise.ai/threats/cve-2026-71929-draytek-vigorswitch-command-injection-in-setdevproto) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71928: DrayTek VigorSwitch command injection in fdftDevice](https://junglewise.ai/threats/cve-2026-71928-draytek-vigorswitch-command-injection-in-fdftdevice) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71927: DrayTek VigorSwitch command injection in rebDevice](https://junglewise.ai/threats/cve-2026-71927-draytek-vigorswitch-command-injection-in-rebdevice) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71926: DrayTek VigorSwitch command injection in setDevice](https://junglewise.ai/threats/cve-2026-71926-draytek-vigorswitch-command-injection-in-setdevice) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71925: DrayTek VigorSwitch command injection in getDetail](https://junglewise.ai/threats/cve-2026-71925-draytek-vigorswitch-command-injection-in-getdetail) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71924: DrayTek VigorSwitch command injection in getVid function](https://junglewise.ai/threats/cve-2026-71924-draytek-vigorswitch-command-injection-in-getvid-function) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71923: DrayTek VigorSwitch command injection in auth_set function](https://junglewise.ai/threats/cve-2026-71923-draytek-vigorswitch-command-injection-in-auth-set-function) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71922: DrayTek VigorSwitch null pointer dereference in setget.cgi](https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi) (high, CVSS 7.5, published 24 Aug 2026) - [CVE-2026-71921: DrayTek VigorSwitch pre-authentication command injection in setget.cgi](https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in) (critical, CVSS 9.8, published 24 Aug 2026) - [CVE-2026-71920: DrayTek VigorSwitch null pointer dereference in formlogout](https://junglewise.ai/threats/cve-2026-71920-draytek-vigorswitch-null-pointer-dereference-in-formlogout) (medium, CVSS 4.9, published 24 Aug 2026) - [CVE-2026-71919: DrayTek VigorSwitch command injection in sysreboot](https://junglewise.ai/threats/cve-2026-71919-draytek-vigorswitch-command-injection-in-sysreboot) (high, CVSS 7.2, published 24 Aug 2026) ## Most severe DrayTek VigorSwitch G2100 vulnerabilities - [CVE-2026-71921: DrayTek VigorSwitch pre-authentication command injection in setget.cgi](https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in) (critical, CVSS 9.8, published 24 Aug 2026) - [CVE-2026-71933: DrayTek VigorSwitch missing authorization in syslog functions](https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions) (critical, CVSS 9.1, published 24 Aug 2026) - [CVE-2026-71922: DrayTek VigorSwitch null pointer dereference in setget.cgi](https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi) (high, CVSS 7.5, published 24 Aug 2026) - [CVE-2026-71943: DrayTek VigorSwitch command injection in setDevNet](https://junglewise.ai/threats/cve-2026-71943-draytek-vigorswitch-command-injection-in-setdevnet) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71930: DrayTek VigorSwitch command injection in setTime function](https://junglewise.ai/threats/cve-2026-71930-draytek-vigorswitch-command-injection-in-settime-function) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71929: DrayTek VigorSwitch command injection in setDevProto](https://junglewise.ai/threats/cve-2026-71929-draytek-vigorswitch-command-injection-in-setdevproto) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71928: DrayTek VigorSwitch command injection in fdftDevice](https://junglewise.ai/threats/cve-2026-71928-draytek-vigorswitch-command-injection-in-fdftdevice) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71927: DrayTek VigorSwitch command injection in rebDevice](https://junglewise.ai/threats/cve-2026-71927-draytek-vigorswitch-command-injection-in-rebdevice) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71926: DrayTek VigorSwitch command injection in setDevice](https://junglewise.ai/threats/cve-2026-71926-draytek-vigorswitch-command-injection-in-setdevice) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71925: DrayTek VigorSwitch command injection in getDetail](https://junglewise.ai/threats/cve-2026-71925-draytek-vigorswitch-command-injection-in-getdetail) (high, CVSS 7.2, published 24 Aug 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 29 | 2 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other DrayTek technologies - [DrayTek VigorSwitch FX2120](https://junglewise.ai/threats/technologies/vigorswitch-fx2120): 29 vulnerabilities - [DrayTek VigorSwitch G1280](https://junglewise.ai/threats/technologies/vigorswitch-g1280): 29 vulnerabilities - [DrayTek VigorSwitch G1282](https://junglewise.ai/threats/technologies/vigorswitch-g1282): 29 vulnerabilities - [DrayTek VigorSwitch G2121](https://junglewise.ai/threats/technologies/vigorswitch-g2121): 29 vulnerabilities - [DrayTek VigorSwitch G2280x](https://junglewise.ai/threats/technologies/vigorswitch-g2280x): 29 vulnerabilities - [DrayTek VigorSwitch G2282x](https://junglewise.ai/threats/technologies/vigorswitch-g2282x): 29 vulnerabilities - [DrayTek VigorSwitch G2540x](https://junglewise.ai/threats/technologies/vigorswitch-g2540x): 29 vulnerabilities - [DrayTek VigorSwitch G2540xs](https://junglewise.ai/threats/technologies/vigorswitch-g2540xs): 29 vulnerabilities - [DrayTek VigorSwitch G2542x](https://junglewise.ai/threats/technologies/vigorswitch-g2542x): 29 vulnerabilities - [DrayTek VigorSwitch P1280](https://junglewise.ai/threats/technologies/vigorswitch-p1280): 29 vulnerabilities - [DrayTek VigorSwitch P1281x](https://junglewise.ai/threats/technologies/vigorswitch-p1281x): 29 vulnerabilities - [DrayTek VigorSwitch P1282](https://junglewise.ai/threats/technologies/vigorswitch-p1282): 29 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "DrayTek VigorSwitch G2100 vulnerabilities", https://junglewise.ai/threats/technologies/vigorswitch-g2100, 9 November 2026.