COMFAST CF-N1-S

• CVE-2026-94003 Critical 10.0 Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow 0.6%
• CVE-2026-78050 Critical 9.9 Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow 0.8%
• CVE-2026-77683 Critical 9.9 Comfast CF-N1-S mbox-config system command injection 2.9%
• CVE-2026-77148 Critical 9.9 Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflow 0.8%
• CVE-2026-77022 Critical 9.9 Comfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflow 0.8%
• CVE-2026-77004 High 7.4 Comfast CF-N1-S mbox-config sprintf command injection 1.8%
• CVE-2026-76008 Critical 10.0 Comfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflow 1.0%
• CVE-2026-75094 Critical 9.1 COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection 3.2%
• CVE-2026-19976 Medium 6.6 COMFAST CF-N1-S mbox-config sub_44A968 command injection 2.9%
• CVE-2026-6799 Medium 6.3 Comfast CF-N1-S Endpoint mbox-config command injection 1.9%