CVE-2026-75094
COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection
- State
- Published
- Severity
- 9.4 Critical
- Published
- Aug 18, 2026
- Updated
- Aug 18, 2026
- Reserved
- Aug 17, 2026
Description
A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET§ion=ptest_ssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.4 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P | VulDB |
| 3.1 | 9.1 Critical | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 3.0 | 9.1 Critical | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 2.0 | 8.3 High | AV:N/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
CF-N1-SCOMFAST |
|
References
- VDB-391346 | COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injectionvdb-entrytechnical-description
- VDB-391346 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- CVE-2026-75094 | CVE Analysis and Reportthird-party-advisory
- Submit #877482 | Comfast CF-N1-S V2.6.0.1 Command Injectionthird-party-advisory
- https://github.com/1ChaoRen1/IOT_1exploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.