Comfast vulnerabilities

Products

• Cf-n1-s 10
• Cf-n1 Firmware 8
• Cf-xr11 Firmware 7
• Cf-n1 6
• Cf-xr11 5
• Cf-ac100 4
• Cf-e7 2
• Cf-e7 Firmware 2
• Cf-n1 V2 2
• Cf-wr610n Firmware 2
• Cf-wr631ax V3 2

Newest

• comfast cf-n1-s Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow CVE-2026-94003 10.0 CriticalSeptember 20, 2026
• comfast cf-n1-s Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow CVE-2026-78050 9.4 CriticalAugust 22, 2026
• comfast cf-n1-s Comfast CF-N1-S mbox-config system command injection CVE-2026-77683 9.4 CriticalAugust 21, 2026
• comfast cf-n1-s Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflow CVE-2026-77148 9.4 CriticalAugust 20, 2026
• comfast cf-n1-s Comfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflow CVE-2026-77022 9.4 CriticalAugust 20, 2026
• comfast cf-n1-s Comfast CF-N1-S mbox-config sprintf command injection CVE-2026-77004 5.3 MediumAugust 20, 2026
• comfast cf-n1-s Comfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflow CVE-2026-76008 10.0 CriticalAugust 19, 2026
• comfast cf-n1-s COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection CVE-2026-75094 9.4 CriticalAugust 18, 2026
• comfast cf-n1-s COMFAST CF-N1-S mbox-config sub_44A968 command injection CVE-2026-19976 5.1 MediumAugust 17, 2026
• comfast cf-wr631ax v3 Comfast CF-WR631AX V3 FastCGI Backend webmgnt system_wl_upload_pic_file os command injection CVE-2026-15511 9.3 CriticalJuly 12, 2026
• comfast cf-wr631ax v3 Comfast CF-WR631AX V3 API Endpoint mbox-config system os command injection CVE-2026-12814 5.3 MediumJune 21, 2026
• comfast cf-n1-s Comfast CF-N1-S Endpoint mbox-config command injection CVE-2026-6799 5.3 MediumApril 21, 2026
• comfast cf-ac100 Comfast CF-AC100 mbox-config command injection CVE-2026-4468 5.1 MediumMarch 20, 2026
• comfast cf-ac100 Comfast CF-AC100 mbox-config command injection CVE-2026-4467 5.1 MediumMarch 20, 2026
• comfast cf-ac100 Comfast CF-AC100 mbox-config command injection CVE-2026-4466 5.1 MediumMarch 20, 2026
• comfast cf-ac100, cf-ac100 firmware +1 more Comfast CF-AC100 Request Path mbox-config sub_44AC14 command injection CVE-2026-3798 EPSS 16.0% 5.1 MediumMarch 9, 2026
• comfast cf-e7, cf-e7 firmware +1 more Comfast CF-E7 webmggnt mbox-config sub_441CF4 command injection CVE-2026-2824 EPSS 17.1% 5.3 MediumFebruary 20, 2026
• comfast cf-e7, cf-e7 firmware +1 more Comfast CF-E7 webmggnt mbox-config sub_41ACCC command injection CVE-2026-2823 EPSS 18.9% 5.3 MediumFebruary 20, 2026
• comfast cf-e4, cf-e4 firmware +1 more Comfast CF-E4 HTTP POST Request mbox-config command injection CVE-2026-2537 EPSS 28.0% 5.1 MediumFebruary 16, 2026
• comfast cf-n1 v2, cf-n1 firmware +1 more Comfast CF-N1 V2 mbox-config sub_44AB9C command injection CVE-2026-2535 EPSS 15.6% 5.3 MediumFebruary 16, 2026
• comfast cf-n1 v2, cf-n1 firmware +1 more Comfast CF-N1 V2 mbox-config sub_44AC4C command injection CVE-2026-2534 EPSS 15.0% 5.3 MediumFebruary 16, 2026
• comfast cf-xr11 firmware A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe... CVE-2025-57293 8.8 HighSeptember 18, 2025
• comfast cf-n1, cf-n1 firmware +1 more Comfast CF-N1 webmgnt wireless_device_dissoc command injection CVE-2025-9586 5.3 MediumAugust 28, 2025
• comfast cf-n1, cf-n1 firmware +1 more Comfast CF-N1 webmgnt wifilith_delete_pic_file command injection CVE-2025-9585 5.3 MediumAugust 28, 2025
• comfast cf-n1, cf-n1 firmware +1 more Comfast CF-N1 webmgnt update_interface_png command injection CVE-2025-9584 5.3 MediumAugust 28, 2025
• comfast cf-n1, cf-n1 firmware +1 more Comfast CF-N1 webmgnt ping_config command injection CVE-2025-9583 5.3 MediumAugust 28, 2025
• comfast cf-n1, cf-n1 firmware +1 more Comfast CF-N1 webmgnt ntp_timezone command injection CVE-2025-9582 5.3 MediumAugust 28, 2025
• comfast cf-n1, cf-n1 firmware +1 more Comfast CF-N1 webmgnt multi_pppoe command injection CVE-2025-9581 5.3 MediumAugust 28, 2025
• comfast cf-xr11 firmware COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4. Attackers... CVE-2024-44466 EPSS 10.7% 9.8 CriticalSeptember 11, 2024
• comfast cf-616ac An issue discovered in Comfast Comfast CF-616AC routers allows attackers to hijack TCP sessions which could lead to a denial of service. CVE-2023-30310 7.5 HighMay 28, 2024
• comfast cf-xr11, cf-xr11 firmware +1 more COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_415588.... CVE-2023-38866 9.8 CriticalAugust 15, 2023
• comfast cf-xr11, cf-xr11 firmware +1 more COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_4143F0.... CVE-2023-38865 9.8 CriticalAugust 15, 2023
• comfast cf-xr11, cf-xr11 firmware +1 more An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the... CVE-2023-38864 9.8 CriticalAugust 15, 2023
• comfast cf-xr11, cf-xr11 firmware +1 more An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname... CVE-2023-38863 9.8 CriticalAugust 15, 2023
• comfast cf-xr11, cf-xr11 firmware +1 more An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the... CVE-2023-38862 9.8 CriticalAugust 15, 2023
• comfast cf-wr610n firmware Improper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the... CVE-2022-45725 8.8 HighFebruary 13, 2023
• comfast cf-wr610n firmware Incorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same... CVE-2022-45724 5.4 MediumFebruary 13, 2023