Buffer Overflow Vulnerability in DrayTek VigorAP Series
CVE-2026-71911

8.6HIGH

Key Information:

Vendor

Draytek Corporation

Status
Vigorap 918r
Vigorap 960c
Vigorap 1060c
Vigorap 906
Vendor
CVE Published:
24 August 2026

What is CVE-2026-71911?

Multiple models in the DrayTek VigorAP series are exposed to a buffer overflow vulnerability within the setLan function due to insufficient length checks during memory copy operations. This flaw involves the lanVlanId0, lanIp, and lanNetmask fields, which, if exploited, could enable remote attackers to launch denial of service attacks or potentially execute arbitrary commands. Successful exploitation necessitates valid administrative credentials for the web management interface of the affected devices.

Affected Version(s)

VigorAP 1060C 0 < 1.4.12

VigorAP 903 0 < 1.4.22

VigorAP 906 0 < 1.4.13

References

https://www.draytek.com/about/security-advisory/multiple-...
vendor-advisory
https://www.vulncheck.com/advisories/draytek-vigorap-mult...
third-party-advisory

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jincheng Wang (@winmt)
Le Yu (Nanjing University of Posts and Telecommunications)
Xiapu Luo (The Hong Kong Polytechnic University)
.