Description
A vulnerability was found in Comfast CF-N1 V2 2.6.0.2. The impacted element is the function sub_44AB9C of the file /cgi-bin/mbox-config?method=SET§ion=ptest_channel. The manipulation of the argument channel results in command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:PCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:RCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:RAV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:URExploitation Context
as of October 15, 2026- Its current EPSS score (15.6%) is higher than that of 31% of CISA KEV entries.
Affected Products
| Vendor | Product | Affected versions |
|---|---|---|
| Comfast | Comfast CF-N1 V2 | 2.6.0.2 |
References
4 LinksRecord Details
More from Comfast
Comfast CF-N1 V2 mbox-config sub_44AC4C command injection
Comfast CF-E4 HTTP POST Request mbox-config command injection
Comfast CF-E7 webmggnt mbox-config sub_41ACCC command injection
Comfast CF-E7 webmggnt mbox-config sub_441CF4 command injection
Related
Tool categories
CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.