Comfast vulnerabilities
28 CVEs and advisories name Comfast as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-122013Comfast CF-WR632AX Multipart webmgnt path traversal
- CVE-2026-94003Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow
- CVE-2026-78050Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow
- CVE-2026-77683Comfast CF-N1-S mbox-config system command injection
- CVE-2026-77148Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflow
- CVE-2026-77022Comfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflow
- CVE-2026-77004Comfast CF-N1-S mbox-config sprintf command injection
- CVE-2026-76008Comfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflow
- CVE-2026-75094COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection
- CVE-2026-19976COMFAST CF-N1-S mbox-config sub_44A968 command injection
- CVE-2026-15511Comfast CF-WR631AX V3 FastCGI Backend webmgnt system_wl_upload_pic_file os command injection
- CVE-2026-12814Comfast CF-WR631AX V3 API Endpoint mbox-config system os command injection
- CVE-2026-6799Comfast CF-N1-S Endpoint mbox-config command injection
- CVE-2026-4468Comfast CF-AC100 mbox-config command injection
- CVE-2026-4467Comfast CF-AC100 mbox-config command injection
- CVE-2026-4466Comfast CF-AC100 mbox-config command injection
- CVE-2026-3798Comfast CF-AC100 Request Path mbox-config sub_44AC14 command injection
- CVE-2026-2824Comfast CF-E7 webmggnt mbox-config sub_441CF4 command injection
- CVE-2026-2823Comfast CF-E7 webmggnt mbox-config sub_41ACCC command injection
- CVE-2026-2537Comfast CF-E4 HTTP POST Request mbox-config command injection
- CVE-2026-2535Comfast CF-N1 V2 mbox-config sub_44AB9C command injection
- CVE-2026-2534Comfast CF-N1 V2 mbox-config sub_44AC4C command injection
- CVE-2025-9586Comfast CF-N1 webmgnt wireless_device_dissoc command injection
- CVE-2025-9585Comfast CF-N1 webmgnt wifilith_delete_pic_file command injection
- CVE-2025-9584Comfast CF-N1 webmgnt update_interface_png command injection
- CVE-2025-9583Comfast CF-N1 webmgnt ping_config command injection
- CVE-2025-9582Comfast CF-N1 webmgnt ntp_timezone command injection
- CVE-2025-9581Comfast CF-N1 webmgnt multi_pppoe command injection