Skip to content
OpenAdvisories

Product · Comfast

CF-AC100

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-4468

    Comfast CF-AC100 mbox-config command injection

    A vulnerability was determined in Comfast CF-AC100 2.6.0.8. Affected is an unknown function of the file /cgi-bin/mbox-config?method=SET&section=update_interface_png. This manipulation causes command injection. The attack is possible to be carried out remotely…

    Comfast CF-AC100
  • Medium 4.7
    CVE-2026-4467

    Comfast CF-AC100 mbox-config command injection

    A vulnerability was found in Comfast CF-AC100 2.6.0.8. This impacts an unknown function of the file /cgi-bin/mbox-config?method=SET&section=wireless_device_dissoc. The manipulation results in command injection. The attack can be executed remotely. The exploit…

    Comfast CF-AC100
  • Medium 4.7
    CVE-2026-4466

    Comfast CF-AC100 mbox-config command injection

    A vulnerability has been found in Comfast CF-AC100 2.6.0.8. This affects an unknown function of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone. The manipulation leads to command injection. Remote exploitation of the attack is possible. The expl…

    Comfast CF-AC100
  • Medium 4.7
    CVE-2026-3798 EPSS 17%

    Comfast CF-AC100 Request Path mbox-config sub_44AC14 command injection

    A vulnerability was detected in Comfast CF-AC100 2.6.0.8. This affects the function sub_44AC14 of the file /cgi-bin/mbox-config?method=SET&section=ping_config of the component Request Path Handler. The manipulation results in command injection. The attack may…

    Comfast CF-AC100