Vulnerabilities

TI-2026-85200 CVE-2026-122013 · GHSA-jm4m-752p-2g2x

Path traversal in Comfast CF-WR632AX multipart parser

MEDIUM 44

A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00822 Published 2026-11-04 No fix listed CWE-22

TI-2026-63261 CVE-2026-94003 · GHSA-w3j5-9v4x-w7pw

Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow

HIGH 82

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00606 Published 2026-09-20 No fix listed CWE-119

TI-2026-54291 CVE-2026-78050 · GHSA-j397-vxh8-xhw3

Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow

HIGH 76

A vulnerability was found in Comfast CF-N1-S 2.6.0.1.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00792 Published 2026-08-22 No fix listed CWE-119

TI-2026-54127 CVE-2026-77683 · GHSA-hh37-xhg2-x62w

Comfast CF-N1-S mbox-config system command injection

HIGH 76

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.02889 Published 2026-08-21 No fix listed CWE-74

TI-2026-53891 CVE-2026-77148 · GHSA-j7x2-7p87-73vg

Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflow

HIGH 76

A vulnerability was found in Comfast CF-N1-S 2.6.0.1.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00792 Published 2026-08-20 No fix listed CWE-119

TI-2026-53806 CVE-2026-77022 · GHSA-5pr4-rqrw-x9qc

Comfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflow

HIGH 76

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00792 Published 2026-08-20 No fix listed CWE-119

TI-2026-53790 CVE-2026-77004 · GHSA-m27q-v5c6-r932

Comfast CF-N1-S mbox-config sprintf command injection

MEDIUM 57

A flaw has been found in Comfast CF-N1-S 2.6.0.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01768 Published 2026-08-20 No fix listed CWE-74

TI-2026-53212 CVE-2026-76008 · GHSA-m8hp-gppg-6x6v

Comfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflow

MEDIUM 45

A flaw has been found in Comfast CF-N1-S 2.6.0.1.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0102 Published 2026-08-19 No fix listed CWE-119

TI-2026-52762 CVE-2026-75094 · GHSA-qp57-ch36-236j

COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection

HIGH 76

A flaw has been found in COMFAST CF-N1-S 2.6.0.1.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.03178 Published 2026-08-18 No fix listed CWE-77

TI-2026-16197 CVE-2026-19976 · GHSA-24vp-g788-qg25

COMFAST CF-N1-S mbox-config sub_44A968 command injection

MEDIUM 56

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.02871 Published 2026-08-17 No fix listed CWE-74

TI-2026-13050 CVE-2026-15511 · GHSA-hpmx-855m-f9m5

Comfast CF-WR631AX V3 FastCGI Backend webmgnt system_wl_upload_pic_file os command injection

HIGH 81

A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.04731 Published 2026-07-12 No fix listed CWE-77

TI-2026-10952 CVE-2026-12814 · GHSA-fvx9-6cqj-p3f8

Comfast CF-WR631AX V3 API Endpoint mbox-config system os command injection

MEDIUM 57

A flaw has been found in Comfast CF-WR631AX V3 up to 2.7.0.8.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02378 Published 2026-06-21 No fix listed CWE-77

TI-2026-05963 CVE-2026-6799 · GHSA-3h35-4gph-x5jr

Comfast CF-N1-S Endpoint mbox-config command injection

LOW 28

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01943 Published 2026-04-21 No fix listed CWE-74

TI-2026-03879 CVE-2026-4468 · GHSA-mpcm-qq2w-h84c

Comfast CF-AC100 mbox-config command injection

MEDIUM 56

A vulnerability was determined in Comfast CF-AC100 2.6.0.8.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.03582 Published 2026-03-20 No fix listed CWE-74

TI-2026-03878 CVE-2026-4467 · GHSA-453r-m585-jv2v

Comfast CF-AC100 mbox-config command injection

MEDIUM 56

A vulnerability was found in Comfast CF-AC100 2.6.0.8.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.03582 Published 2026-03-20 No fix listed CWE-74

TI-2026-03877 CVE-2026-4466 · GHSA-chcf-49r6-qhgf

Comfast CF-AC100 mbox-config command injection

MEDIUM 56

A vulnerability has been found in Comfast CF-AC100 2.6.0.8.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.04317 Published 2026-03-20 No fix listed CWE-74

TI-2026-03287 CVE-2026-3798 · GHSA-686w-7c78-3m4c

Comfast CF-AC100 Request Path mbox-config sub_44AC14 command injection

MEDIUM 56

A vulnerability was detected in Comfast CF-AC100 2.6.0.8.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.16961 Published 2026-03-09 No fix listed CWE-74

TI-2026-02426 CVE-2026-2824 · GHSA-5fgx-x2mx-c652

Comfast CF-E7 webmggnt mbox-config sub_441CF4 command injection

MEDIUM 57

A flaw has been found in Comfast CF-E7 2.6.0.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.17142 Published 2026-02-20 No fix listed CWE-74

TI-2026-02425 CVE-2026-2823 · GHSA-6wwj-pg79-rf37

Comfast CF-E7 webmggnt mbox-config sub_41ACCC command injection

MEDIUM 57

A vulnerability was detected in Comfast CF-E7 2.6.0.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.1877 Published 2026-02-20 No fix listed CWE-74

TI-2026-02163 CVE-2026-2537 · GHSA-9394-fqhw-qhr3

Comfast CF-E4 HTTP POST Request mbox-config command injection

MEDIUM 56

A vulnerability was identified in Comfast CF-E4 2.6.0.1.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.27976 Published 2026-02-16 No fix listed CWE-74

TI-2026-02161 CVE-2026-2535 · GHSA-7364-56q4-9jv8

Comfast CF-N1 V2 mbox-config sub_44AB9C command injection

MEDIUM 57

A vulnerability was found in Comfast CF-N1 V2 2.6.0.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.15595 Published 2026-02-16 No fix listed CWE-74

TI-2026-02160 CVE-2026-2534 · GHSA-cr6h-978m-qj75

Comfast CF-N1 V2 mbox-config sub_44AC4C command injection

MEDIUM 57

A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.1505 Published 2026-02-16 No fix listed CWE-74

TI-2025-35499 CVE-2025-57293 · GHSA-6x44-8387-hrwg

A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the…

HIGH 73

A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe API, processed by the sub_423930 function in /usr/bin/webmgnt.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01679 Published 2025-09-18 No fix listed CWE-77

TI-2025-08779 CVE-2025-9586 · GHSA-gv2q-6f6j-9cc8

Comfast CF-N1 webmgnt wireless_device_dissoc command injection

HIGH 65

A vulnerability was identified in Comfast CF-N1 2.6.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.07519 Published 2025-08-28 No fix listed CWE-74

TI-2025-08778 CVE-2025-9585 · GHSA-c3wp-c723-c74r

Comfast CF-N1 webmgnt wifilith_delete_pic_file command injection

HIGH 65

A vulnerability was determined in Comfast CF-N1 2.6.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0462 Published 2025-08-28 No fix listed CWE-74

Vulnerabilities

Filters