Skip to content
OpenAdvisories

Product · Comfast

CF-E4

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2026-2537 EPSS 28%

    Comfast CF-E4 HTTP POST Request mbox-config command injection

    A vulnerability was identified in Comfast CF-E4 2.6.0.1. This impacts an unknown function of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone of the component HTTP POST Request Handler. Such manipulation of the argument timestr leads to command i…

    Comfast CF-E4