PatchTheCVEcomfast vulnerabilities
Recent CVEs affecting comfast products. 14 tracked.
comfast has 14 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-03-09. Highest priority: CVE-2024-44466 (score 68/100).
- CVE-2025-9584 MEDIUM 6.3 MITIGATE A vulnerability was found in Comfast CF-N1 2.6.0
- CVE-2025-9586 MEDIUM 6.3 MITIGATE A vulnerability was identified in Comfast CF-N1 2.6.0
- CVE-2025-9581 MEDIUM 6.3 MITIGATE A vulnerability was detected in Comfast CF-N1 2.6.0
- CVE-2025-9582 MEDIUM 6.3 MITIGATE A flaw has been found in Comfast CF-N1 2.6.0
- CVE-2025-9583 MEDIUM 6.3 MITIGATE A vulnerability has been found in Comfast CF-N1 2.6.0
- CVE-2025-9585 MEDIUM 6.3 MITIGATE A vulnerability was determined in Comfast CF-N1 2.6.0
- CVE-2026-3798 MEDIUM 4.7 MITIGATE A vulnerability was detected in Comfast CF-AC100 2.6.0.8
- CVE-2026-2824 MEDIUM 6.3 MITIGATE A flaw has been found in Comfast CF-E7 2.6.0.9
- CVE-2026-2823 MEDIUM 6.3 MITIGATE A vulnerability was detected in Comfast CF-E7 2.6.0.9
- CVE-2026-2537 MEDIUM 4.7 MITIGATE A vulnerability was identified in Comfast CF-E4 2.6.0.1
- CVE-2026-2535 MEDIUM 6.3 MITIGATE A vulnerability was found in Comfast CF-N1 V2 2.6.0.2
- CVE-2026-2534 MEDIUM 6.3 MITIGATE A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2
- CVE-2025-57293 HIGH 8.8 MITIGATE A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe API, processe
- CVE-2024-44466 CRITICAL 9.8 MITIGATE COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4
FAQ
How do I fix comfast vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is comfast being exploited right now?
None of the tracked comfast CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which comfast CVE should I patch first?
CVE-2024-44466 currently ranks highest (68/100): COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4.