Skip to content
OpenAdvisories

Product · Comfast

CF-E7

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-2824 EPSS 17%

    Comfast CF-E7 webmggnt mbox-config sub_441CF4 command injection

    A flaw has been found in Comfast CF-E7 2.6.0.9. This affects the function sub_441CF4 of the file /cgi-bin/mbox-config?method=SET&section=ping_config of the component webmggnt. Executing a manipulation of the argument destination can lead to command injection.…

    Comfast CF-E7
  • Medium 6.3
    CVE-2026-2823 EPSS 19%

    Comfast CF-E7 webmggnt mbox-config sub_41ACCC command injection

    A vulnerability was detected in Comfast CF-E7 2.6.0.9. The impacted element is the function sub_41ACCC of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone of the component webmggnt. Performing a manipulation of the argument timestr results in com…

    Comfast CF-E7