CVE-2026-6799: fallo de gravedad media en Comfast CF-N1-S
Comfast CF-N1-S Endpoint mbox-config command injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 5.3epss 1.9%
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is some unknown functionality of the file /cgi-bin/mbox-config?method=SET§ion=ping_config of the component Endpoint. Performing a manipulation of the argument destination results in command injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
Comfast · CF-N1-SPoCs públicas encontradas — 1
cve_referencegithub.com/Blackhole23-Lab/-/blob/main/Comfast-CF-N1-S-Router-VUDB.mdno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Comfast CF-N1-S
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-77683CRITICALComfast CF-N1-S mbox-config system command injectionEPSS 2.9%CVE-2026-77004MEDIUMComfast CF-N1-S mbox-config sprintf command injectionEPSS 1.8%CVE-2026-76008CRITICALComfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflowEPSS 1.0%CVE-2026-78050CRITICALComfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflowEPSS 0.8%CVE-2026-77148CRITICALComfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflowEPSS 0.8%CVE-2026-77022CRITICALComfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflowEPSS 0.8%