Known vulnerabilities in VigorSwitch G2540xs

Vendor: DrayTek Corp.
Software: VigorSwitch G2540xs
Software CPE: cpe:2.3:h:draytek_corp:vigorswitch_g2540xs:*:*:*:*:*:*:*:*
Website: https://www.draytek.co.uk
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VigorSwitch G2540xs VigorSwitch G2540xs is affected by 18 known vulnerabilities: 2 high, 1 medium, 15 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151611 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-71943		 CWE-78 Low
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151592 - Memory corruption
CVE-2026-71942		 CWE-119 Low
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151591 - Memory corruption
CVE-2026-71941		 CWE-119 Low
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151570 - Memory corruption
CVE-2026-71940		 CWE-119 Low
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151569 - Memory corruption
CVE-2026-71939		 CWE-119 Low
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151567 - Memory corruption
CVE-2026-71937		 CWE-119 Low
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151562 - Memory corruption
CVE-2026-71936		 CWE-119 Low
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151548 - Memory corruption
CVE-2026-71935		 CWE-119 Low
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151547 - Missing Authorization
CVE-2026-71933		 CWE-862 High
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151546 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-71932		 CWE-22 Low
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151545 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-71931		 CWE-78 Low
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151544 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-71930		 CWE-78 Low
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151543 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-71929		 CWE-78 Low
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151538 - NULL Pointer Dereference
CVE-2026-71922		 CWE-476 Medium
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151537 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-71921		 CWE-78 High
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151536 - NULL Pointer Dereference
CVE-2026-71920		 CWE-476 Low
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151535 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-71919		 CWE-78 Low
No
No
 3.9.12 22.09.2026 SB2026092234
#VU151534 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-71917		 CWE-78 Low
No
No
 3.9.12 22.09.2026 SB2026092234