Vulnerabilidades em Comfast

28 resultados
Análise Vexday

Comfast apresenta 18 vulnerabilidades catalogadas, com apenas 1 de severidade crítica e nenhuma sob ataque ativo conhecido. A fraqueza dominante é CWE-77 (Improper Neutralization of Special Elements), sendo 2 vulnerabilidades publicadas nos últimos 90 dias, indicando risco moderado e recente que requer monitoramento contínuo.

CVE-2026-2537MEDIUMComfast CF-E4 HTTP POST Request mbox-config command injectionEPSS 28.0%CVE-2026-2823MEDIUMComfast CF-E7 webmggnt mbox-config sub_41ACCC command injectionEPSS 18.8%CVE-2026-2824MEDIUMComfast CF-E7 webmggnt mbox-config sub_441CF4 command injectionEPSS 17.1%CVE-2026-3798MEDIUMComfast CF-AC100 Request Path mbox-config sub_44AC14 command injectionEPSS 17.0%CVE-2026-2535MEDIUMComfast CF-N1 V2 mbox-config sub_44AB9C command injectionEPSS 15.6%CVE-2026-2534MEDIUMComfast CF-N1 V2 mbox-config sub_44AC4C command injectionEPSS 15.0%CVE-2025-9584MEDIUMComfast CF-N1 webmgnt update_interface_png command injectionEPSS 7.5%CVE-2025-9586MEDIUMComfast CF-N1 webmgnt wireless_device_dissoc command injectionEPSS 7.5%CVE-2025-9581MEDIUMComfast CF-N1 webmgnt multi_pppoe command injectionEPSS 4.8%CVE-2025-9582MEDIUMComfast CF-N1 webmgnt ntp_timezone command injectionEPSS 4.8%CVE-2026-15511CRITICALComfast CF-WR631AX V3 FastCGI Backend webmgnt system_wl_upload_pic_file os command injectionEPSS 4.7%CVE-2025-9583MEDIUMComfast CF-N1 webmgnt ping_config command injectionEPSS 4.6%CVE-2025-9585MEDIUMComfast CF-N1 webmgnt wifilith_delete_pic_file command injectionEPSS 4.6%CVE-2026-4466MEDIUMComfast CF-AC100 mbox-config command injectionEPSS 4.3%CVE-2026-4467MEDIUMComfast CF-AC100 mbox-config command injectionEPSS 3.6%CVE-2026-4468MEDIUMComfast CF-AC100 mbox-config command injectionEPSS 3.6%CVE-2026-75094CRITICALCOMFAST CF-N1-S CGI mbox-config sub_44B438 os command injectionEPSS 3.2%CVE-2026-77683CRITICALComfast CF-N1-S mbox-config system command injectionEPSS 2.9%CVE-2026-19976MEDIUMCOMFAST CF-N1-S mbox-config sub_44A968 command injectionEPSS 2.9%CVE-2026-12814MEDIUMComfast CF-WR631AX V3 API Endpoint mbox-config system os command injectionEPSS 2.4%