---
id: CVE-2026-71932
title: >-
  Multiple DrayTek VigorSwitch models contain a directory traversal
  vulnerability in the getSyslogFile function
summary: >-
  Multiple DrayTek VigorSwitch models contain a directory traversal
  vulnerability in the getSyslogFile function. The vulnerability is caused by
  insufficient validation of the option field. A remote attacker can trigger
  this vulnerability v…
severity: medium
cvss: 4.9
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-22
published: '2026-08-24'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T22:10:00.247'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-71932'
references:
  - url: >-
      https://www.draytek.com/about/security-advisory/multiple-vulnerabilities-in-vigorswitch-series-august-2026/
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/draytek-vigorswitch-multiple-models-path-traversal-via-getsyslogfile
    label: disclosure@vulncheck.com
tags:
  - nvd
epss: 0.01038
epssPercentile: 0.6298
ingestedAt: '2026-10-12T23:07:25.623Z'
---

## Overview

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input containing path traversal sequences to access arbitrary files on the device. Exploitation requires valid administrative credentials for the device's web management interface.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.