Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/02/17 7:28 a.m.2 views

CVE-2026-2534

A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub44AC4C of the file /cgi-bin/mbox-config?method=SET=ptestbandwidth. The manipulation of the argument bandwidth leads to command injection. The attack can be initiated remotely. The exploit has been...

8.8CVSS5.5AI score0.00517EPSS
Exploits1References1
EUVD
EUVD
added 2026/02/16 6:31 a.m.3 views

EUVD-2026-6127

A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub44AC4C of the file /cgi-bin/mbox-config?method=SET&section=ptestbandwidth. The manipulation of the argument bandwidth leads to command injection. The attack can be initiated remotely. The exploit h...

8.8CVSS5.5AI score0.00517EPSS
Exploits1References5
NVD
NVD
added 2026/02/16 4:15 a.m.5 views

CVE-2026-2534

A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub44AC4C of the file /cgi-bin/mbox-config?method=SET&section=ptestbandwidth. The manipulation of the argument bandwidth leads to command injection. The attack can be initiated remotely. The exploit h...

8.8CVSS0.00517EPSS
Exploits1References4
OSV
OSV
added 2026/02/16 4:15 a.m.2 views

CVE-2026-2534

A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub44AC4C of the file /cgi-bin/mbox-config?method=SET&section=ptestbandwidth. The manipulation of the argument bandwidth leads to command injection. The attack can be initiated remotely. The exploit h...

8.8CVSS5.6AI score0.00517EPSS
Exploits1References4
CVE
CVE
added 2026/02/16 4:2 a.m.10 views

CVE-2026-2534

CVE-2026-2534 affects Comfast CF-N1 V2 2.6.0.2. The vulnerability is located in the function sub_44AC4C of /cgi-bin/mbox-config?method=SET&section=ptest_bandwidth, where manipulating the bandwidth argument leads to remote command injection. Public exploit has been disclosed; vendor did not respon...

8.8CVSS6.3AI score0.00517EPSS
Exploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/16 4:2 a.m.2 views

CVE-2026-2534

A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub44AC4C of the file /cgi-bin/mbox-config?method=SET&section=ptestbandwidth. The manipulation of the argument bandwidth leads to command injection. The attack can be initiated remotely. The exploit h...

6.5CVSS5.4AI score0.00517EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2026/02/16 12:0 a.m.4 views

COMFAST CF-N1 命令注入漏洞

COMFAST CF-N1 is a wireless router produced by COMFAST Corporation. The Comfast CF-N1 V2 2.6.0.2 version has a command injection vulnerability. This vulnerability stems from incorrect handling of the parameter “bandwidth” in the function sub44AC4C within the file...

8.8CVSS6.6AI score0.00517EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/02/16 12:0 a.m.3 views

PT-2026-8310

Name of the Vulnerable Software and Affected Versions Comfast CF-N1 V2 version 2.6.0.2 Description A remote command injection issue exists in Comfast CF-N1 V2 2.6.0.2. The issue is located in the sub 44AC4C function within the /cgi-bin/mbox-config file. Manipulation of the bandwidth argument in t...

6.5CVSS6.7AI score0.00517EPSS
Exploits1References12
RedhatCVE
RedhatCVE
added 2026/01/09 12:38 p.m.4 views

CVE-2023-50988

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function...

9.8CVSS7.9AI score0.00121EPSS
Exploits1References1
OSV
OSV
added 2024/03/26 9:15 p.m.0 views

CVE-2024-2909

A vulnerability classified as critical was found in Ruijie RG-EG350 up to 20240318. Affected by this vulnerability is the function setAction of the file /itboxpi/networksafe.php?a=set of the component HTTP POST Request Handler. The manipulation of the argument bandwidth leads to os command...

8.8CVSS5.6AI score
Exploits0References4
CNNVD
CNNVD
added 2024/03/26 12:0 a.m.1 views

Ruijie Networks RG-EG350 操作系统命令注入漏洞

Ruijie Networks RG-EG350 is a multi-service integrated gateway product from China's Ruijie Networks that solves today's small and medium-sized network egress challenges. An OS command injection vulnerability exists in Ruijie Networks RG-EG350 20240318 and earlier versions, which originates from a...

9CVSS9AI score0.03457EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2023/12/20 10:15 p.m.0 views

CVE-2023-50988

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function...

9.8CVSS6.1AI score0.00121EPSS
Exploits1References3
OSV
OSV
added 2023/12/20 10:15 p.m.2 views

CVE-2023-50988

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function...

9.8CVSS6.2AI score
Exploits0References2
Rows per page
Query Builder