Browse CVEs

HIGH 7.2 CVE-2026-3798EPSS 15% A vulnerability was detected in Comfast CF-AC100 2.6.0.8. This affects the function sub_44AC14 of the file /cgi-bin/mbox-config?method=SET&section=pi… Cf Ac100 Firmware No fix yet Fix from $1,9502026-03-09 HIGH 8.8 CVE-2026-2824EPSS 15% A flaw has been found in Comfast CF-E7 2.6.0.9. This affects the function sub_441CF4 of the file /cgi-bin/mbox-config?method=SET&section=ping_config … Cf E7 Firmware No fix yet Fix from $1,9502026-02-20 HIGH 8.8 CVE-2026-2823EPSS 17% A vulnerability was detected in Comfast CF-E7 2.6.0.9. The impacted element is the function sub_41ACCC of the file /cgi-bin/mbox-config?method=SET&se… Cf E7 Firmware No fix yet Fix from $1,9502026-02-20 HIGH 7.2 CVE-2026-2537EPSS 24% A vulnerability was identified in Comfast CF-E4 2.6.0.1. This impacts an unknown function of the file /cgi-bin/mbox-config?method=SET&section=ntp_tim… Cf E4 Firmware No fix yet Fix from $1,9502026-02-16 HIGH 8.8 CVE-2026-2535EPSS 14% A vulnerability was found in Comfast CF-N1 V2 2.6.0.2. The impacted element is the function sub_44AB9C of the file /cgi-bin/mbox-config?method=SET&se… Cf N1 Firmware No fix yet Fix from $1,9502026-02-16 HIGH 8.8 CVE-2026-2534EPSS 13% A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub_44AC4C of the file /cgi-bin/mbox-config?method=S… Cf N1 Firmware No fix yet Fix from $1,9502026-02-16 HIGH 8.8 CVE-2025-57293 A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe API, processed by the sub_423930 function in /usr/bi… Cf Xr11 Firmware No fix yet Fix from $1,9502025-09-18 HIGH 8.8 CVE-2025-9585EPSS 5% A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt. This manipula… Cf N1 Firmware No fix yet Fix from $1,9502025-08-28 HIGH 8.8 CVE-2025-9586EPSS 8% A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. S… Cf N1 Firmware No fix yet Fix from $1,9502025-08-28 CRITICAL 9.8 CVE-2025-9582EPSS 5% A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of the argum… Cf N1 Firmware Mitigation only Fix from $2,3002025-08-28 HIGH 8.8 CVE-2025-9583EPSS 5% A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file /usr/bin/webmgnt. The m… Cf N1 Firmware No fix yet Fix from $1,9502025-08-28 HIGH 8.8 CVE-2025-9584EPSS 8% A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manip… Cf N1 Firmware No fix yet Fix from $1,9502025-08-28 CRITICAL 9.8 CVE-2025-9581EPSS 5% A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing manipulation of t… Cf N1 Firmware Mitigation only Fix from $2,3002025-08-28 CRITICAL 9.8 CVE-2024-44466EPSS 11% COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and… Cf Xr11 Firmware No fix yet Fix from $2,3002024-09-11 CRITICAL 9.8 CVE-2023-38866 COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_415588. Attackers can send POST request messages to /usr/bin/we… Cf Xr11 Firmware No fix yet Fix from $2,3002023-08-15 CRITICAL 9.8 CVE-2023-38864 An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protal_delete_picname parameter in the sub_41171C function a… Cf Xr11 Firmware No fix yet Fix from $2,3002023-08-15 CRITICAL 9.8 CVE-2023-38862 An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the destination parameter of sub_431F64 function in bin/webmgnt. Cf Xr11 Firmware No fix yet Fix from $2,3002023-08-15 CRITICAL 9.8 CVE-2023-38863 An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub_410074 function at bin/… Cf Xr11 Firmware No fix yet Fix from $2,3002023-08-15 CRITICAL 9.8 CVE-2023-38865 COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_4143F0. Attackers can send POST request messages to /usr/bin/we… Cf Xr11 Firmware No fix yet Fix from $2,3002023-08-15 HIGH 8.8 CVE-2022-45725EPSS 7% Improper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to execute arbitrary code on the target vi… Cf Wr610n Firmware Mitigation only Fix from $1,9502023-02-13 MEDIUM 5.4 CVE-2022-45724 Incorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to perform any HTTP request to an unauthent… Cf Wr610n Firmware No fix yet Fix from $1,6002023-02-13