comfast

Top products

The 15 most recently published vulnerabilities affecting comfast.

• CVE-2026-75094COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection9.1Aug 18, 2026
• CVE-2026-19976COMFAST CF-N1-S mbox-config sub_44A968 command injection6.6Aug 17, 2026
• CVE-2026-15511Comfast CF-WR631AX V3 FastCGI Backend webmgnt system_wl_upload_pic_file os command injection9.8Jul 12, 2026
• CVE-2026-12814Comfast CF-WR631AX V3 API Endpoint mbox-config system os command injection6.3Jun 21, 2026
• CVE-2026-6799Comfast CF-N1-S Endpoint mbox-config command injection6.3Apr 21, 2026
• CVE-2026-4468Comfast CF-AC100 mbox-config command injection4.7Mar 20, 2026
• CVE-2026-4467Comfast CF-AC100 mbox-config command injection4.7Mar 20, 2026
• CVE-2026-4466Comfast CF-AC100 mbox-config command injection4.7Mar 20, 2026
• CVE-2026-3798Comfast CF-AC100 Request Path mbox-config sub_44AC14 command injection4.7Mar 9, 2026
• CVE-2026-2824Comfast CF-E7 webmggnt mbox-config sub_441CF4 command injection6.3Feb 20, 2026
• CVE-2026-2823Comfast CF-E7 webmggnt mbox-config sub_41ACCC command injection6.3Feb 20, 2026
• CVE-2026-2537Comfast CF-E4 HTTP POST Request mbox-config command injection4.7Feb 16, 2026
• CVE-2026-2535Comfast CF-N1 V2 mbox-config sub_44AB9C command injection6.3Feb 16, 2026
• CVE-2026-2534Comfast CF-N1 V2 mbox-config sub_44AC4C command injection6.3Feb 16, 2026
• CVE-2025-57293A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe API, processed by the sub_423930 function in /usr/bin/webmgnt. The phy_interface parameter is not sa...8.8Sep 18, 2025