Critical severity · published Aug 21, 2026
CVE-2026-77683
Comfast CF-N1-S mbox-config system command injection
9.9
CVSS
2.9%
EPSS
No
On KEV
Description
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET§ion=ntp_timezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
CF-N1-S · Comfast
2.6.0.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-77683
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-77683
github.com
https://github.com/AdminSafe/CVE/issues/8
vuldb.com
https://vuldb.com/cve/CVE-2026-77683
vuldb.com
https://vuldb.com/submit/881058
vuldb.com
https://vuldb.com/vuln/394033
vuldb.com
https://vuldb.com/vuln/394033/cti
More from CF-N1-S
10.0
CVE-2026-94003
Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow
10.0
CVE-2026-76008
Comfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflow
9.9
CVE-2026-78050
Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow
9.9
CVE-2026-77148
Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflow
9.9
CVE-2026-77022
Comfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflow