CO
Vendor
Comfast
46
CVEs
0
On KEV
0
New 30D
Products
CF10.0
CF-N1-S
Comfast
10 CVEs0 on KEV0 new
CF9.8
Cf-n1 Firmware
Comfast
8 CVEs0 on KEV0 new
CF9.8
Cf-xr11 Firmware
Comfast
7 CVEs0 on KEV0 new
CF9.8
CF-N1
Comfast
6 CVEs0 on KEV0 new
CF7.2
CF-AC100
Comfast
4 CVEs0 on KEV0 new
CF8.8
CF-E7
Comfast
2 CVEs0 on KEV0 new
CV8.8
CF-N1 V2
Comfast
2 CVEs0 on KEV0 new
CF8.8
Cf-wr610n Firmware
Comfast
2 CVEs0 on KEV0 new
CV9.8
CF-WR631AX V3
Comfast
2 CVEs0 on KEV0 new
CF7.2
CF-AC100
Comfast
1 CVEs0 on KEV0 new
CF7.2
CF-E4
Comfast
1 CVEs0 on KEV0 new
CF7.2
Cf-e4 Firmware
Comfast
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-94003 | CF CF-N1-S Comfast | 10.0 | Sep 20 | Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow |
| CVE-2026-78050 | CF CF-N1-S Comfast | 9.9 | Aug 22 | Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow |
| CVE-2026-77683 | CF CF-N1-S Comfast | 9.9 | Aug 21 | Comfast CF-N1-S mbox-config system command injection |
| CVE-2026-77148 | CF CF-N1-S Comfast | 9.9 | Aug 20 | Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflow |
| CVE-2026-77022 | CF CF-N1-S Comfast | 9.9 | Aug 20 | Comfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflow |
| CVE-2026-77004 | CF CF-N1-S Comfast | 7.4 | Aug 20 | Comfast CF-N1-S mbox-config sprintf command injection |
| CVE-2026-76008 | CF CF-N1-S Comfast | 10.0 | Aug 19 | Comfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflow |
| CVE-2026-75094 | CF CF-N1-S COMFAST | 9.1 | Aug 18 | COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection |
| CVE-2026-19976 | CF CF-N1-S COMFAST | 6.6 | Aug 17 | COMFAST CF-N1-S mbox-config sub_44A968 command injection |
| CVE-2026-15511 | CV CF-WR631AX V3 Comfast | 9.8 | Jul 12 | Comfast CF-WR631AX V3 FastCGI Backend webmgnt system_wl_upload_pic_file os command injection |
| CVE-2026-12814 | CV CF-WR631AX V3 Comfast | 6.3 | Jun 21 | Comfast CF-WR631AX V3 API Endpoint mbox-config system os command injection |
| CVE-2026-6799 | CF CF-N1-S Comfast | 6.3 | Apr 21 | Comfast CF-N1-S Endpoint mbox-config command injection |
| CVE-2026-4468 | CF CF-AC100 Comfast | 4.7 | Mar 20 | Comfast CF-AC100 mbox-config command injection |
| CVE-2026-4467 | CF CF-AC100 Comfast | 4.7 | Mar 20 | Comfast CF-AC100 mbox-config command injection |
| CVE-2026-4466 | CF CF-AC100 Comfast | 4.7 | Mar 20 | Comfast CF-AC100 mbox-config command injection |
| CVE-2026-3798 | CF CF-AC100 Comfast | 7.2 | Mar 9 | Comfast CF-AC100 Request Path mbox-config sub_44AC14 command injection |
| CVE-2026-2824 | CF CF-E7 Comfast | 8.8 | Feb 20 | Comfast CF-E7 webmggnt mbox-config sub_441CF4 command injection |
| CVE-2026-2823 | CF CF-E7 Comfast | 8.8 | Feb 20 | Comfast CF-E7 webmggnt mbox-config sub_41ACCC command injection |
| CVE-2026-2537 | CF CF-E4 Comfast | 7.2 | Feb 16 | Comfast CF-E4 HTTP POST Request mbox-config command injection |
| CVE-2026-2535 | CV CF-N1 V2 Comfast | 8.8 | Feb 16 | Comfast CF-N1 V2 mbox-config sub_44AB9C command injection |
| CVE-2026-2534 | CV CF-N1 V2 Comfast | 8.8 | Feb 16 | Comfast CF-N1 V2 mbox-config sub_44AC4C command injection |
| CVE-2025-57293 | CF Cf-xr11 Firmware Comfast | 8.8 | Sep 18 | A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe API, processed by the sub_423930 function in /usr/bin/webmgnt |
| CVE-2025-9586 | CF CF-N1 Comfast | 8.8 | Aug 28 | Comfast CF-N1 webmgnt wireless_device_dissoc command injection |
| CVE-2025-9585 | CF CF-N1 Comfast | 8.8 | Aug 28 | Comfast CF-N1 webmgnt wifilith_delete_pic_file command injection |
| CVE-2025-9584 | CF CF-N1 Comfast | 8.8 | Aug 28 | Comfast CF-N1 webmgnt update_interface_png command injection |
| CVE-2025-9583 | CF CF-N1 Comfast | 8.8 | Aug 28 | Comfast CF-N1 webmgnt ping_config command injection |
| CVE-2025-9582 | CF CF-N1 Comfast | 9.8 | Aug 28 | Comfast CF-N1 webmgnt ntp_timezone command injection |
| CVE-2025-9581 | CF CF-N1 Comfast | 9.8 | Aug 28 | Comfast CF-N1 webmgnt multi_pppoe command injection |
| CVE-2024-44466 | CF Cf-xr11 Firmware Comfast | 9.8 | Sep 11 | COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4 |
| CVE-2023-38866 | CF Cf-xr11 Firmware Comfast | 9.8 | Aug 15 | COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_415588 |
| CVE-2023-38864 | CF Cf-xr11 Firmware Comfast | 9.8 | Aug 15 | An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protal_delete_picname parameter in the sub_41171C function at bin/webmgnt |
| CVE-2023-38865 | CF Cf-xr11 Firmware Comfast | 9.8 | Aug 15 | COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_4143F0 |
| CVE-2023-38863 | CF Cf-xr11 Firmware Comfast | 9.8 | Aug 15 | An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub_410074 function at bin/webmgnt |
| CVE-2023-38862 | CF Cf-xr11 Firmware Comfast | 9.8 | Aug 15 | An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the destination parameter of sub_431F64 function in bin/webmgnt |
| CVE-2022-45725 | CF Cf-wr610n Firmware Comfast | 8.8 | Feb 13 | Improper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to execute arbitrary code on the target via an HTTP POST request |
| CVE-2022-45724 | CF Cf-wr610n Firmware Comfast | 5.4 | Feb 13 | Incorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to perform any HTTP request to an unauthenticated page to force the… |