Vulnerability index

Browse CVEs

21 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Cf Ac100 Firmware HIGH 7.2
CVE-2026-3798EPSS 15%

A vulnerability was detected in Comfast CF-AC100 2.6.0.8. This affects the function sub_44AC14 of the file /cgi-bin/mbox-config?method=SET&section=pi…

No fix yet
Fix from $1,950 2026-03-09
Cf E7 Firmware HIGH 8.8
CVE-2026-2824EPSS 15%

A flaw has been found in Comfast CF-E7 2.6.0.9. This affects the function sub_441CF4 of the file /cgi-bin/mbox-config?method=SET&section=ping_config …

No fix yet
Fix from $1,950 2026-02-20
Cf E7 Firmware HIGH 8.8
CVE-2026-2823EPSS 17%

A vulnerability was detected in Comfast CF-E7 2.6.0.9. The impacted element is the function sub_41ACCC of the file /cgi-bin/mbox-config?method=SET&se…

No fix yet
Fix from $1,950 2026-02-20
Cf E4 Firmware HIGH 7.2
CVE-2026-2537EPSS 24%

A vulnerability was identified in Comfast CF-E4 2.6.0.1. This impacts an unknown function of the file /cgi-bin/mbox-config?method=SET&section=ntp_tim…

No fix yet
Fix from $1,950 2026-02-16
Cf N1 Firmware HIGH 8.8
CVE-2026-2535EPSS 14%

A vulnerability was found in Comfast CF-N1 V2 2.6.0.2. The impacted element is the function sub_44AB9C of the file /cgi-bin/mbox-config?method=SET&se…

No fix yet
Fix from $1,950 2026-02-16
Cf N1 Firmware HIGH 8.8
CVE-2026-2534EPSS 13%

A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub_44AC4C of the file /cgi-bin/mbox-config?method=S…

No fix yet
Fix from $1,950 2026-02-16
Cf Xr11 Firmware HIGH 8.8
CVE-2025-57293

A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe API, processed by the sub_423930 function in /usr/bi…

No fix yet
Fix from $1,950 2025-09-18
Cf N1 Firmware HIGH 8.8
CVE-2025-9585EPSS 5%

A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt. This manipula…

No fix yet
Fix from $1,950 2025-08-28
Cf N1 Firmware HIGH 8.8
CVE-2025-9586EPSS 8%

A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. S…

No fix yet
Fix from $1,950 2025-08-28
Cf N1 Firmware CRITICAL 9.8
CVE-2025-9582EPSS 5%

A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of the argum…

Mitigation only
Fix from $2,300 2025-08-28
Cf N1 Firmware HIGH 8.8
CVE-2025-9583EPSS 5%

A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file /usr/bin/webmgnt. The m…

No fix yet
Fix from $1,950 2025-08-28
Cf N1 Firmware HIGH 8.8
CVE-2025-9584EPSS 8%

A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manip…

No fix yet
Fix from $1,950 2025-08-28
Cf N1 Firmware CRITICAL 9.8
CVE-2025-9581EPSS 5%

A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing manipulation of t…

Mitigation only
Fix from $2,300 2025-08-28
Cf Xr11 Firmware CRITICAL 9.8
CVE-2024-44466EPSS 11%

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and…

No fix yet
Fix from $2,300 2024-09-11
Cf Xr11 Firmware CRITICAL 9.8
CVE-2023-38866

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_415588. Attackers can send POST request messages to /usr/bin/we…

No fix yet
Fix from $2,300 2023-08-15
Cf Xr11 Firmware CRITICAL 9.8
CVE-2023-38864

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protal_delete_picname parameter in the sub_41171C function a…

No fix yet
Fix from $2,300 2023-08-15
Cf Xr11 Firmware CRITICAL 9.8
CVE-2023-38862

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the destination parameter of sub_431F64 function in bin/webmgnt.

No fix yet
Fix from $2,300 2023-08-15
Cf Xr11 Firmware CRITICAL 9.8
CVE-2023-38863

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub_410074 function at bin/…

No fix yet
Fix from $2,300 2023-08-15
Cf Xr11 Firmware CRITICAL 9.8
CVE-2023-38865

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_4143F0. Attackers can send POST request messages to /usr/bin/we…

No fix yet
Fix from $2,300 2023-08-15
Cf Wr610n Firmware HIGH 8.8
CVE-2022-45725EPSS 7%

Improper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to execute arbitrary code on the target vi…

Mitigation only
Fix from $1,950 2023-02-13
Cf Wr610n Firmware MEDIUM 5.4
CVE-2022-45724

Incorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to perform any HTTP request to an unauthent…

No fix yet
Fix from $1,600 2023-02-13