Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save startup configuration, or clear logs.

Multiple DrayTek VigorSwitch models are affected by unauthorized operation vulnerabilities in several syslog functions. The root cause is missing authorization checks, allowing remote attackers to perform sensitive operations without authentication. Attackers can craft malicious requests to modify device configuration, restart services, save startup configuration, or clear logs. The vulnerability poses significant risk to network infrastructure as it can be exploited remotely without credentials. DrayTek has published a security advisory addressing these issues in August 2026. The flaw is classified under missing authorization (CWE-862) and impacts network switch management integrity and availability.