Vulnerability · Published Aug 24, 2026 · Assigned by VulnCheck
CVE-2026-71911DrayTek VigorAP Multiple Models Buffer Overflow via setLan
High 7.2
In plain English
A high-severity buffer overflow in VigorAP 1060C from DrayTek Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Official description
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service or potentially executing arbitrary commands. Exploitation requires valid administrative credentials for the device's web management interface.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| DrayTek Corporation | VigorAP 918R | 0 – before 1.4.11 |
| DrayTek Corporation | VigorAP 960C | 0 – before 1.4.12 |
| DrayTek Corporation | VigorAP 1060C | 0 – before 1.4.12 |
| DrayTek Corporation | VigorAP 906 | 0 – before 1.4.13 |
| DrayTek Corporation | VigorAP 912C | 0 – before 1.4.15 |
| DrayTek Corporation | VigorAP 903 | 0 – before 1.4.22 |
Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H