CVE-2025-9585

🗓️ 28 Aug 2025 20:32:06Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 9 Views🌐 WEB

CVE-2025-9585: Comfast CF N1 webmgnt wifilith_delete_pic_file command injection enables remote exploit.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-9585	28 Aug 202520:50	–	circl
CNNVD	COMFAST CF-N1 安全漏洞	28 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-9585 Comfast CF-N1 webmgnt wifilith_delete_pic_file command injection	28 Aug 202520:32	–	cvelist
EUVD	EUVD-2025-26146	3 Oct 202520:07	–	euvd
NVD	CVE-2025-9585	28 Aug 202521:15	–	nvd
Positive Technologies	PT-2025-35137	28 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-9585	31 Aug 202500:04	–	redhatcve
Vulnrichment	CVE-2025-9585 Comfast CF-N1 webmgnt wifilith_delete_pic_file command injection	28 Aug 202520:32	–	vulnrichment

NVD

Vulners

Node

comfast cf-n1_firmwareMatch2.6.0

AND

comfast cf-n1Match2

[
  {
    "vendor": "Comfast",
    "product": "CF-N1",
    "versions": [
      {
        "version": "2.6.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/ZZ2266/.github.io/blob/main/COMFAST/N1V2/wifilith_delete_pic_file/readme.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
portal_delete_picname	path	/usr/bin/webmgnt	Command injection via argument portal_delete_picname in wifilith_delete_pic_file	CWE-74, CWE-77

29 Apr 2026 01:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.3 - 8.8

CVSS 45.3

CVSS 26.5

CVSS 36.3

EPSS0.00846

SSVC

comfast cf n1 web management wifilith delete pic file command injection remote exploit