Comfast

Cf-n1 Firmware

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-2535

Exploit
  • EPSS 0.35%
  • Veröffentlicht 16.02.2026 04:32:06
  • Zuletzt bearbeitet 19.02.2026 19:40:56

A vulnerability was found in Comfast CF-N1 V2 2.6.0.2. The impacted element is the function sub_44AB9C of the file /cgi-bin/mbox-config?method=SET&section=ptest_channel. The manipulation of the argument channel results in command injection. The attac...

8.8

CVE-2026-2534

Exploit
  • EPSS 0.35%
  • Veröffentlicht 16.02.2026 04:15:52
  • Zuletzt bearbeitet 19.02.2026 19:41:31

A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub_44AC4C of the file /cgi-bin/mbox-config?method=SET&section=ptest_bandwidth. The manipulation of the argument bandwidth leads to command injection. Th...

8.8

CVE-2025-9586

Exploit
  • EPSS 0.18%
  • Veröffentlicht 28.08.2025 21:15:44
  • Zuletzt bearbeitet 02.10.2025 19:38:36

A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be performed from a r...

8.8

CVE-2025-9585

Exploit
  • EPSS 0.18%
  • Veröffentlicht 28.08.2025 20:32:06
  • Zuletzt bearbeitet 02.10.2025 19:38:52

A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt. This manipulation of the argument portal_delete_picname causes command injection. The attack is possible to be car...

8.8

CVE-2025-9584

Exploit
  • EPSS 0.18%
  • Veröffentlicht 28.08.2025 20:02:08
  • Zuletzt bearbeitet 02.10.2025 19:38:58

A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manipulation of the argument interface/display_name results in command injection. The attack can be execut...

8.8

CVE-2025-9583

Exploit
  • EPSS 0.18%
  • Veröffentlicht 28.08.2025 20:02:06
  • Zuletzt bearbeitet 02.10.2025 19:39:18

A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation of the attack is possible. The exploit ha...

9.8

CVE-2025-9582

Exploit
  • EPSS 0.19%
  • Veröffentlicht 28.08.2025 19:32:07
  • Zuletzt bearbeitet 11.09.2025 13:08:36

A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of the argument timestr can lead to command injection. The attack may be launched remotely. The exploit has been ...

9.8

CVE-2025-9581

Exploit
  • EPSS 0.21%
  • Veröffentlicht 28.08.2025 19:02:10
  • Zuletzt bearbeitet 11.09.2025 13:24:02

A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing manipulation of the argument phy_interface results in command injection. The attack may be initiated remotely. The exp...