{"schema_version":1,"title":"DrayTek VigorSwitch Q2300x vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 29 vulnerabilities in DrayTek VigorSwitch Q2300x: 0 in the last 7 days and 29 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-71943, was published on 24 August 2026.","url":"https://junglewise.ai/threats/technologies/vigorswitch-q2300x","json_url":"https://junglewise.ai/threats/technologies/vigorswitch-q2300x.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/vigorswitch-q2300x","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":25,"all_time":29,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":29,"last_365_days":29},"latest":[{"cve":"CVE-2026-71943","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71943-draytek-vigorswitch-command-injection-in-setdevnet","title":"DrayTek VigorSwitch command injection in setDevNet","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:20.077+00:00","url":"https://junglewise.ai/threats/cve-2026-71943-draytek-vigorswitch-command-injection-in-setdevnet"},{"cve":"CVE-2026-71942","cvss":7.2,"epss":0.0068,"slug":"cve-2026-71942-draytek-vigorswitch-buffer-overflow-in-mail-mailalert","title":"DrayTek VigorSwitch buffer overflow in mail_mailalert","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:19.877+00:00","url":"https://junglewise.ai/threats/cve-2026-71942-draytek-vigorswitch-buffer-overflow-in-mail-mailalert"},{"cve":"CVE-2026-71941","cvss":7.2,"epss":0.0068,"slug":"cve-2026-71941-draytek-vigorswitch-buffer-overflow-in-diag-logmail","title":"DrayTek VigorSwitch buffer overflow in diag_logmail","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:19.68+00:00","url":"https://junglewise.ai/threats/cve-2026-71941-draytek-vigorswitch-buffer-overflow-in-diag-logmail"},{"cve":"CVE-2026-71940","cvss":7.2,"epss":0.0068,"slug":"cve-2026-71940-draytek-vigorswitch-buffer-overflow-in-acl-general-setup-edit-ace","title":"DrayTek VigorSwitch buffer overflow in acl_general_setup Edit ACE","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:19.48+00:00","url":"https://junglewise.ai/threats/cve-2026-71940-draytek-vigorswitch-buffer-overflow-in-acl-general-setup-edit-ace"},{"cve":"CVE-2026-71939","cvss":7.2,"epss":0.0068,"slug":"cve-2026-71939-draytek-vigorswitch-buffer-overflow-in-acl-general-setup","title":"DrayTek VigorSwitch buffer overflow in acl_general_setup","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:19.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71939-draytek-vigorswitch-buffer-overflow-in-acl-general-setup"},{"cve":"CVE-2026-71938","cvss":7.2,"epss":0.0068,"slug":"cve-2026-71938-draytek-vigorswitch-buffer-overflow-in-switch-lan-gvrp","title":"DrayTek VigorSwitch buffer overflow in switch_lan_gvrp","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:19.083+00:00","url":"https://junglewise.ai/threats/cve-2026-71938-draytek-vigorswitch-buffer-overflow-in-switch-lan-gvrp"},{"cve":"CVE-2026-71937","cvss":7.2,"epss":0.0068,"slug":"cve-2026-71937-draytek-vigorswitch-buffer-overflow-in-poe-schedule-profile","title":"DrayTek VigorSwitch buffer overflow in poe_schedule_profile","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:18.89+00:00","url":"https://junglewise.ai/threats/cve-2026-71937-draytek-vigorswitch-buffer-overflow-in-poe-schedule-profile"},{"cve":"CVE-2026-71936","cvss":7.2,"epss":0.0068,"slug":"cve-2026-71936-draytek-vigorswitch-buffer-overflow-in-sysreboot-function","title":"DrayTek VigorSwitch buffer overflow in sysreboot function","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:18.693+00:00","url":"https://junglewise.ai/threats/cve-2026-71936-draytek-vigorswitch-buffer-overflow-in-sysreboot-function"},{"cve":"CVE-2026-71935","cvss":7.2,"epss":0.0068,"slug":"cve-2026-71935-draytek-vigorswitch-buffer-overflow-in-webbackupaction","title":"DrayTek VigorSwitch buffer overflow in webBackupAction","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:18.49+00:00","url":"https://junglewise.ai/threats/cve-2026-71935-draytek-vigorswitch-buffer-overflow-in-webbackupaction"},{"cve":"CVE-2026-71934","cvss":7.2,"epss":0.0068,"slug":"cve-2026-71934-draytek-vigorswitch-buffer-overflow-in-pingtrace","title":"DrayTek VigorSwitch buffer overflow in pingtrace","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:18.29+00:00","url":"https://junglewise.ai/threats/cve-2026-71934-draytek-vigorswitch-buffer-overflow-in-pingtrace"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71932","cvss":4.9,"epss":0.0104,"slug":"cve-2026-71932-draytek-vigorswitch-directory-traversal-in-getsyslogfile","title":"DrayTek VigorSwitch directory traversal in getSyslogFile","severity":"medium","exploited":false,"published_at":"2026-08-24T18:17:17.893+00:00","url":"https://junglewise.ai/threats/cve-2026-71932-draytek-vigorswitch-directory-traversal-in-getsyslogfile"},{"cve":"CVE-2026-71931","cvss":7.2,"epss":0.0178,"slug":"cve-2026-71931-draytek-vigorswitch-command-injection-in-tftp-upgrade","title":"DrayTek VigorSwitch command injection in tftp_upgrade","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:17.697+00:00","url":"https://junglewise.ai/threats/cve-2026-71931-draytek-vigorswitch-command-injection-in-tftp-upgrade"},{"cve":"CVE-2026-71930","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71930-draytek-vigorswitch-command-injection-in-settime-function","title":"DrayTek VigorSwitch command injection in setTime function","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:08.643+00:00","url":"https://junglewise.ai/threats/cve-2026-71930-draytek-vigorswitch-command-injection-in-settime-function"},{"cve":"CVE-2026-71929","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71929-draytek-vigorswitch-command-injection-in-setdevproto","title":"DrayTek VigorSwitch command injection in setDevProto","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:08.48+00:00","url":"https://junglewise.ai/threats/cve-2026-71929-draytek-vigorswitch-command-injection-in-setdevproto"},{"cve":"CVE-2026-71928","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71928-draytek-vigorswitch-command-injection-in-fdftdevice","title":"DrayTek VigorSwitch command injection in fdftDevice","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:08.303+00:00","url":"https://junglewise.ai/threats/cve-2026-71928-draytek-vigorswitch-command-injection-in-fdftdevice"},{"cve":"CVE-2026-71927","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71927-draytek-vigorswitch-command-injection-in-rebdevice","title":"DrayTek VigorSwitch command injection in rebDevice","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:08.14+00:00","url":"https://junglewise.ai/threats/cve-2026-71927-draytek-vigorswitch-command-injection-in-rebdevice"},{"cve":"CVE-2026-71926","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71926-draytek-vigorswitch-command-injection-in-setdevice","title":"DrayTek VigorSwitch command injection in setDevice","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.977+00:00","url":"https://junglewise.ai/threats/cve-2026-71926-draytek-vigorswitch-command-injection-in-setdevice"},{"cve":"CVE-2026-71925","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71925-draytek-vigorswitch-command-injection-in-getdetail","title":"DrayTek VigorSwitch command injection in getDetail","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.813+00:00","url":"https://junglewise.ai/threats/cve-2026-71925-draytek-vigorswitch-command-injection-in-getdetail"},{"cve":"CVE-2026-71924","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71924-draytek-vigorswitch-command-injection-in-getvid-function","title":"DrayTek VigorSwitch command injection in getVid function","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.653+00:00","url":"https://junglewise.ai/threats/cve-2026-71924-draytek-vigorswitch-command-injection-in-getvid-function"},{"cve":"CVE-2026-71923","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71923-draytek-vigorswitch-command-injection-in-auth-set-function","title":"DrayTek VigorSwitch command injection in auth_set function","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.497+00:00","url":"https://junglewise.ai/threats/cve-2026-71923-draytek-vigorswitch-command-injection-in-auth-set-function"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"},{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71920","cvss":4.9,"epss":0.0056,"slug":"cve-2026-71920-draytek-vigorswitch-null-pointer-dereference-in-formlogout","title":"DrayTek VigorSwitch null pointer dereference in formlogout","severity":"medium","exploited":false,"published_at":"2026-08-24T18:17:06.847+00:00","url":"https://junglewise.ai/threats/cve-2026-71920-draytek-vigorswitch-null-pointer-dereference-in-formlogout"},{"cve":"CVE-2026-71919","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71919-draytek-vigorswitch-command-injection-in-sysreboot","title":"DrayTek VigorSwitch command injection in sysreboot","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:06.61+00:00","url":"https://junglewise.ai/threats/cve-2026-71919-draytek-vigorswitch-command-injection-in-sysreboot"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":2,"exploited":0,"vulnerabilities":29},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"DrayTek VigorSwitch FX2120","slug":"vigorswitch-fx2120","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-fx2120"},{"name":"DrayTek VigorSwitch G1280","slug":"vigorswitch-g1280","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g1280"},{"name":"DrayTek VigorSwitch G1282","slug":"vigorswitch-g1282","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g1282"},{"name":"DrayTek VigorSwitch G2100","slug":"vigorswitch-g2100","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2100"},{"name":"DrayTek VigorSwitch G2121","slug":"vigorswitch-g2121","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2121"},{"name":"DrayTek VigorSwitch G2280x","slug":"vigorswitch-g2280x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2280x"},{"name":"DrayTek VigorSwitch G2282x","slug":"vigorswitch-g2282x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2282x"},{"name":"DrayTek VigorSwitch G2540x","slug":"vigorswitch-g2540x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2540x"},{"name":"DrayTek VigorSwitch G2540xs","slug":"vigorswitch-g2540xs","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2540xs"},{"name":"DrayTek VigorSwitch G2542x","slug":"vigorswitch-g2542x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2542x"},{"name":"DrayTek VigorSwitch P1280","slug":"vigorswitch-p1280","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p1280"},{"name":"DrayTek VigorSwitch P1281x","slug":"vigorswitch-p1281x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p1281x"}],"technology":{"hub":true,"name":"DrayTek VigorSwitch Q2300x","slug":"vigorswitch-q2300x","vendor":{"name":"DrayTek","slug":"draytek","url":"https://junglewise.ai/threats/vendors/draytek"},"aliases":[],"category":"appliance","url":"https://junglewise.ai/threats/technologies/vigorswitch-q2300x"},"most_severe":[{"cve":"CVE-2026-71921","cvss":9.8,"epss":0.0279,"slug":"cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in","title":"DrayTek VigorSwitch pre-authentication command injection in setget.cgi","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:07.06+00:00","url":"https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in"},{"cve":"CVE-2026-71933","cvss":9.1,"epss":0.0055,"slug":"cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions","title":"DrayTek VigorSwitch missing authorization in syslog functions","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions"},{"cve":"CVE-2026-71922","cvss":7.5,"epss":0.0069,"slug":"cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi","title":"DrayTek VigorSwitch null pointer dereference in setget.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.28+00:00","url":"https://junglewise.ai/threats/cve-2026-71922-draytek-vigorswitch-null-pointer-dereference-in-setget-cgi"},{"cve":"CVE-2026-71943","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71943-draytek-vigorswitch-command-injection-in-setdevnet","title":"DrayTek VigorSwitch command injection in setDevNet","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:20.077+00:00","url":"https://junglewise.ai/threats/cve-2026-71943-draytek-vigorswitch-command-injection-in-setdevnet"},{"cve":"CVE-2026-71930","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71930-draytek-vigorswitch-command-injection-in-settime-function","title":"DrayTek VigorSwitch command injection in setTime function","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:08.643+00:00","url":"https://junglewise.ai/threats/cve-2026-71930-draytek-vigorswitch-command-injection-in-settime-function"},{"cve":"CVE-2026-71929","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71929-draytek-vigorswitch-command-injection-in-setdevproto","title":"DrayTek VigorSwitch command injection in setDevProto","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:08.48+00:00","url":"https://junglewise.ai/threats/cve-2026-71929-draytek-vigorswitch-command-injection-in-setdevproto"},{"cve":"CVE-2026-71928","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71928-draytek-vigorswitch-command-injection-in-fdftdevice","title":"DrayTek VigorSwitch command injection in fdftDevice","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:08.303+00:00","url":"https://junglewise.ai/threats/cve-2026-71928-draytek-vigorswitch-command-injection-in-fdftdevice"},{"cve":"CVE-2026-71927","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71927-draytek-vigorswitch-command-injection-in-rebdevice","title":"DrayTek VigorSwitch command injection in rebDevice","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:08.14+00:00","url":"https://junglewise.ai/threats/cve-2026-71927-draytek-vigorswitch-command-injection-in-rebdevice"},{"cve":"CVE-2026-71926","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71926-draytek-vigorswitch-command-injection-in-setdevice","title":"DrayTek VigorSwitch command injection in setDevice","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.977+00:00","url":"https://junglewise.ai/threats/cve-2026-71926-draytek-vigorswitch-command-injection-in-setdevice"},{"cve":"CVE-2026-71925","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71925-draytek-vigorswitch-command-injection-in-getdetail","title":"DrayTek VigorSwitch command injection in getDetail","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:07.813+00:00","url":"https://junglewise.ai/threats/cve-2026-71925-draytek-vigorswitch-command-injection-in-getdetail"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}