CCOMFAST

Products

Exploited and recent CVEs

• CVE-2026-122013 Critical 10.0 Comfast CF-WR632AX Multipart webmgnt path traversal 0.8%
• CVE-2026-94003 Critical 10.0 Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow 0.6%
• CVE-2026-78050 Critical 9.9 Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow 0.8%
• CVE-2026-77683 Critical 9.9 Comfast CF-N1-S mbox-config system command injection 2.9%
• CVE-2026-77148 Critical 9.9 Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflow 0.8%
• CVE-2026-77022 Critical 9.9 Comfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflow 0.8%
• CVE-2026-77004 High 7.4 Comfast CF-N1-S mbox-config sprintf command injection 1.8%
• CVE-2026-76008 Critical 10.0 Comfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflow 1.0%
• CVE-2026-75094 Critical 9.1 COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection 3.2%
• CVE-2026-19976 Medium 6.6 COMFAST CF-N1-S mbox-config sub_44A968 command injection 2.9%
• CVE-2026-15511 Critical 9.8 Comfast CF-WR631AX V3 FastCGI Backend webmgnt system_wl_upload_pic_file os command injection 4.7%
• CVE-2026-12814 Medium 6.3 Comfast CF-WR631AX V3 API Endpoint mbox-config system os command injection 2.4%
• CVE-2026-6799 Medium 6.3 Comfast CF-N1-S Endpoint mbox-config command injection 1.9%
• CVE-2026-4468 Medium 4.7 Comfast CF-AC100 mbox-config command injection 3.6%
• CVE-2026-4467 Medium 4.7 Comfast CF-AC100 mbox-config command injection 3.6%
• CVE-2026-4466 Medium 4.7 Comfast CF-AC100 mbox-config command injection 4.3%
• CVE-2026-3798 Medium 4.7 Comfast CF-AC100 Request Path mbox-config sub_44AC14 command injection 17.0%
• CVE-2026-2824 Medium 6.3 Comfast CF-E7 webmggnt mbox-config sub_441CF4 command injection 17.1%
• CVE-2026-2823 Medium 6.3 Comfast CF-E7 webmggnt mbox-config sub_41ACCC command injection 18.8%
• CVE-2026-2537 Medium 4.7 Comfast CF-E4 HTTP POST Request mbox-config command injection 28.0%
• CVE-2026-2535 Medium 6.3 Comfast CF-N1 V2 mbox-config sub_44AB9C command injection 15.6%
• CVE-2026-2534 Medium 6.3 Comfast CF-N1 V2 mbox-config sub_44AC4C command injection 15.0%
• CVE-2025-9586 Medium 6.3 Comfast CF-N1 webmgnt wireless_device_dissoc command injection 7.5%
• CVE-2025-9585 Medium 6.3 Comfast CF-N1 webmgnt wifilith_delete_pic_file command injection 4.6%
• CVE-2025-9584 Medium 6.3 Comfast CF-N1 webmgnt update_interface_png command injection 7.5%
• CVE-2025-9583 Medium 6.3 Comfast CF-N1 webmgnt ping_config command injection 4.6%
• CVE-2025-9582 Medium 6.3 Comfast CF-N1 webmgnt ntp_timezone command injection 4.8%
• CVE-2025-9581 Medium 6.3 Comfast CF-N1 webmgnt multi_pppoe command injection 4.8%