https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3798.htmlhttps://patchthecve.com/cve/CVE-2026-3798.htmlWed, 17 Jun 2026 10:44:14 +0000MEDIUM 4.7: A vulnerability was detected in Comfast CF-AC100 2.6.0.8. This affects the function sub_44AC14 of the file /cgi-bin/mbox-config?method=SET&section=ping_config of the component Request Path Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is nowhttps://patchthecve.com/cve/CVE-2026-2824.htmlhttps://patchthecve.com/cve/CVE-2026-2824.htmlWed, 17 Jun 2026 10:31:50 +0000MEDIUM 6.3: A flaw has been found in Comfast CF-E7 2.6.0.9. This affects the function sub_441CF4 of the file /cgi-bin/mbox-config?method=SET&section=ping_config of the component webmggnt. Executing a manipulation of the argument destination can lead to command injection. The attack may be performed from remote.https://patchthecve.com/cve/CVE-2026-2823.htmlhttps://patchthecve.com/cve/CVE-2026-2823.htmlWed, 17 Jun 2026 10:31:50 +0000MEDIUM 6.3: A vulnerability was detected in Comfast CF-E7 2.6.0.9. The impacted element is the function sub_41ACCC of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone of the component webmggnt. Performing a manipulation of the argument timestr results in command injection. The attack is possible tohttps://patchthecve.com/cve/CVE-2026-2537.htmlhttps://patchthecve.com/cve/CVE-2026-2537.htmlWed, 17 Jun 2026 10:31:16 +0000MEDIUM 4.7: A vulnerability was identified in Comfast CF-E4 2.6.0.1. This impacts an unknown function of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone of the component HTTP POST Request Handler. Such manipulation of the argument timestr leads to command injection. The attack may be launched remohttps://patchthecve.com/cve/CVE-2026-2535.htmlhttps://patchthecve.com/cve/CVE-2026-2535.htmlWed, 17 Jun 2026 10:31:15 +0000MEDIUM 6.3: A vulnerability was found in Comfast CF-N1 V2 2.6.0.2. The impacted element is the function sub_44AB9C of the file /cgi-bin/mbox-config?method=SET&section=ptest_channel. The manipulation of the argument channel results in command injection. The attack can be launched remotely. The exploit has been mhttps://patchthecve.com/cve/CVE-2026-2534.htmlhttps://patchthecve.com/cve/CVE-2026-2534.htmlWed, 17 Jun 2026 10:31:15 +0000MEDIUM 6.3: A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub_44AC4C of the file /cgi-bin/mbox-config?method=SET&section=ptest_bandwidth. The manipulation of the argument bandwidth leads to command injection. The attack can be initiated remotely. The exploit hahttps://patchthecve.com/cve/CVE-2025-57293.htmlhttps://patchthecve.com/cve/CVE-2025-57293.htmlWed, 17 Jun 2026 09:42:59 +0000HIGH 8.8: A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe API, processed by the sub_423930 function in /usr/bin/webmgnt. The phy_interface parameter is not sanitized, allowing attackers to inject arbitrary commands via a POST request to /cgi-bin/mbox-config?methttps://patchthecve.com/cve/CVE-2025-9586.htmlhttps://patchthecve.com/cve/CVE-2025-9586.htmlSat, 26 Sep 2026 00:10:00 +0000MEDIUM 6.3: A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be performed from a remote location. The exploit is publicly available https://patchthecve.com/cve/CVE-2025-9585.htmlhttps://patchthecve.com/cve/CVE-2025-9585.htmlSat, 26 Sep 2026 00:10:00 +0000MEDIUM 6.3: A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt. This manipulation of the argument portal_delete_picname causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly dhttps://patchthecve.com/cve/CVE-2025-9584.htmlhttps://patchthecve.com/cve/CVE-2025-9584.htmlSat, 26 Sep 2026 00:10:00 +0000MEDIUM 6.3: A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manipulation of the argument interface/display_name results in command injection. The attack can be executed remotely. The exploit has been made public and https://patchthecve.com/cve/CVE-2025-9583.htmlhttps://patchthecve.com/cve/CVE-2025-9583.htmlSat, 26 Sep 2026 00:10:00 +0000MEDIUM 6.3: A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.https://patchthecve.com/cve/CVE-2025-9582.htmlhttps://patchthecve.com/cve/CVE-2025-9582.htmlSat, 26 Sep 2026 00:10:00 +0000MEDIUM 6.3: A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of the argument timestr can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used.https://patchthecve.com/cve/CVE-2025-9581.htmlhttps://patchthecve.com/cve/CVE-2025-9581.htmlSat, 26 Sep 2026 00:10:00 +0000MEDIUM 6.3: A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing manipulation of the argument phy_interface results in command injection. The attack may be initiated remotely. The exploit is now public and may be used.https://patchthecve.com/cve/CVE-2024-44466.htmlhttps://patchthecve.com/cve/CVE-2024-44466.htmlWed, 17 Jun 2026 07:52:51 +0000CRITICAL 9.8: COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface.