PT-2026-78262

A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get para from uri of the file /cgi-bin/mbox-config of the component URI Parameter Parsing. This manipulation of the argument width/height causes stack-based buffer overflow. The attack can be initiated remotely...

CVE-2026-75094

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptestssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. Th...

CVE-2026-75094

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptestssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. Th...

EUVD-2026-60566

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptestssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. Th...

CVE-2026-75094

COMFAST CF-N1-S firmware 2.6.0.1 has an OS command injection flaw in the CGI endpoint /cgi-bin/mbox-config?method=SET&section=ptest_ssid (function sub_44B438): the ssid parameter is passed unsanitized to a shell, enabling remote attackers with high privileges to execute arbitrary OS commands. CVS...

CVE-2026-75094 COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptestssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. Th...

CVE-2026-75094 COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptestssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. Th...

PT-2026-76903

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub 44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptest ssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible...

CVE-2026-75094: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptestssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. Th...

CVE-2026-19976

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptestmacaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit...

EUVD-2026-60036

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptestmacaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit...

CVE-2026-19976

CVE-2026-19976 affects COMFAST CF-N1-S firmware 2.6.0.1. The vulnerability exists in the function sub_44A968 within /cgi-bin/mbox-config?method=SET&section=ptest_macaddress, where improper handling of the macaddress argument enables remote command injection. The issue can be exploited remotely; p...

CVE-2026-19976 COMFAST CF-N1-S mbox-config sub_44A968 command injection

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptestmacaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit...

CVE-2026-19976

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptestmacaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit...

PT-2026-73195

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub 44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptest macaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploi...

CVE-2026-19976: Improper Neutralization of Special Elements used in a Command

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptestmacaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-12482 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-12482 Source advisory: OSV:PYSEC-2026-3630...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-12481 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-12481 Source advisory: OSV:PYSEC-2026-3631...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-12479 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-12479 Source advisory: OSV:PYSEC-2026-3632...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-9335 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-9335 Source advisory: OSV:PYSEC-2026-3633...