Comfast

16 CVEs across 15 Comfast products. Browse Comfast vulnerabilities, severities, and proof-of-concept exploits.

Comfast products with known CVEs

ProductCVEs
Cf-N18
Cf-N1 Firmware8
Cf-Xr117
Cf-Xr11 Firmware7
Cf-Ac1004
Cf-E72
Cf-E7 Firmware2
Cf-N1 V22
Cf-Wr610n2
Cf-Wr610n Firmware2
Cf-Wr631ax V32
Cf-Ac100 Firmware1
Cf-E41
Cf-E4 Firmware1
Cf-N1-S1
Comfast CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-15511Critical9.82026-07-12A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerability is the function system_wl_upload_pic_file of the file /us…
CVE-2026-12814Medium6.32026-06-21A flaw has been found in Comfast CF-WR631AX V3 up to 2.7.0.8. This issue affects the function system of the file /cgi-bin/mbox-config?section=ping_config of th…
CVE-2026-6799Medium6.32026-04-21A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is some unknown functionality of the file /cgi-bin/mbox-config?method=SE…
CVE-2026-4468Medium4.72026-03-20A vulnerability was determined in Comfast CF-AC100 2.6.0.8. Affected is an unknown function of the file /cgi-bin/mbox-config?method=SET&section=update_interfac…
CVE-2026-4467Medium4.72026-03-20A vulnerability was found in Comfast CF-AC100 2.6.0.8. This impacts an unknown function of the file /cgi-bin/mbox-config?method=SET&section=wireless_device_dis…
CVE-2026-4466Medium4.72026-03-20A vulnerability has been found in Comfast CF-AC100 2.6.0.8. This affects an unknown function of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone…
CVE-2026-3798Medium4.72026-03-09A vulnerability was detected in Comfast CF-AC100 2.6.0.8. This affects the function sub_44AC14 of the file /cgi-bin/mbox-config?method=SET&section=ping_config…
CVE-2026-2824Medium6.32026-02-20A flaw has been found in Comfast CF-E7 2.6.0.9. This affects the function sub_441CF4 of the file /cgi-bin/mbox-config?method=SET&section=ping_config of the com…
CVE-2026-2823Medium6.32026-02-20A vulnerability was detected in Comfast CF-E7 2.6.0.9. The impacted element is the function sub_41ACCC of the file /cgi-bin/mbox-config?method=SET&section=ntp_…
CVE-2026-2537Medium4.72026-02-16A vulnerability was identified in Comfast CF-E4 2.6.0.1. This impacts an unknown function of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone of t…
CVE-2026-2535Medium6.32026-02-16A vulnerability was found in Comfast CF-N1 V2 2.6.0.2. The impacted element is the function sub_44AB9C of the file /cgi-bin/mbox-config?method=SET&section=ptes…
CVE-2026-2534Medium6.32026-02-16A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub_44AC4C of the file /cgi-bin/mbox-config?method=SET&section…
CVE-2025-57293High8.82025-09-18A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe API, processed by the sub_423930 function in /usr/bin/webmgnt…
CVE-2025-9586Medium6.32025-08-28A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipu…
CVE-2025-9585Medium6.32025-08-28A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt. This manipulation of th…
CVE-2025-9584Medium6.32025-08-28A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manipulation of…
CVE-2025-9583Medium6.32025-08-28A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file /usr/bin/webmgnt. The manipulatio…
CVE-2025-9582Medium6.32025-08-28A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of the argument timest…
CVE-2025-9581Medium6.32025-08-28A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing manipulation of the argumen…
CVE-2024-44466Critical9.82024-09-11COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject co…
CVE-2023-38866Critical9.82023-08-15COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_415588. Attackers can send POST request messages to /usr/bin/webmgnt and…
CVE-2023-38864Critical9.82023-08-15An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protal_delete_picname parameter in the sub_41171C function at bin/webm…
CVE-2023-38865Critical9.82023-08-15COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_4143F0. Attackers can send POST request messages to /usr/bin/webmgnt and…
CVE-2023-38863Critical9.82023-08-15An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub_410074 function at bin/webmgnt.
CVE-2023-38862Critical9.82023-08-15An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the destination parameter of sub_431F64 function in bin/webmgnt.
CVE-2022-45725High8.82023-02-13Improper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to execute arbitrary code on the target via an HTTP…
CVE-2022-45724Medium5.42023-02-13Incorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to perform any HTTP request to an unauthenticated pag…