Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-77004

Comfast CF-N1-S mbox-config sprintf command injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A flaw has been found in Comfast CF-N1-S 2.6.0.1. This impacts the function sprintf of the file /cgi-bin/mbox-config?method=SET&section=ptest_sn. Executing a manipulation of the argument sn can lead to command injection. The attack can be launched remotely. The exploit has been published and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Comfast CF-N1-S

  • 2.6.0.1affected

References