1931 matches found
PT-2026-95900
Name of the Vulnerable Software and Affected Versions Comfast CF-N1-S version 2.6.0.1 Description The Web Management Interface contains a stack-based buffer overflow that can be triggered remotely. The issue exists within the get css path from uri function located in the /cgi-bin/mbox-config...
com.tmsps:ne4spring (>=1.0, <=1.5.2), org.cloudfoundry.identity:cloudfoundry-identity-api (>=2.3.1, <=3.20.0) +12 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.1.8)
org.mariadb.jdbc:mariadb-java-client MAVEN version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.tmsps:ne4spring =1.0, =2.3.1, =2.3.1, =2.3.1, =2.3.1, =2.3.1, =3.0.0, =2.3.1, =0.2,...
PT-2026-96490
In the Linux kernel, the following vulnerability has been resolved: s390/cpum cf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- ' crashes the kernel when CPUs are hotplug added during that run. Root cause is the allocation of struct cpu cf events at first event...
AZL-99165 CVE-2026-78662 affecting package cf-cli for versions less than 8.7.11-9
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...
AZL-99168 CVE-2026-56855 affecting package cf-cli for versions less than 8.7.11-9
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
CVE-2026-75363
An issue in Comfast CF-WR630AX v.2.7.0.2 allows a remote attacker to execute arbitrary code via the /usr/bin/webmgnt, /cgi-bin/mbox-config, and the parameters timestr, displayn...
CVE-2026-75364
Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX 2024-01-30 build, the updateinterfacepng SET handler in /usr/bin/webmgnt fails to sanitize the displayname parameter. User-controlled input is concatenated via sprintf into the unquoted shell command /etc/rrd/graphinterface %s %s and executed by...
CVE-2026-75364
The Comfast CF-N1-S (firmware 2.6.0.1) and CF-WR630AX (2024-01-30 build) are vulnerable to OS command injection due to a lack of input sanitization in the update_interface_png SET handler within /usr/bin/webmgnt. Specifically, the display_name parameter is concatenated via sprintf() into an unquo...
CVE-2026-75363
The Comfast CF-WR630AX v.2.7.0.2 is affected by a vulnerability that allows a remote attacker to achieve arbitrary code execution . The root cause is the Improper Neutralization of Special Elements used in an OS Command involving the /usr/bin/webmgnt and /cgi-bin/mbox-config endpoints, specifical...
EUVD-2026-66743
An issue in Comfast CF-WR630AX v.2.7.0.2 allows a remote attacker to execute arbitrary code via the /usr/bin/webmgnt, /cgi-bin/mbox-config, and the parameters timestr, displayn...
CVE-2026-75364
Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX 2024-01-30 build, the updateinterfacepng SET handler in /usr/bin/webmgnt fails to sanitize the displayname parameter. User-controlled input is concatenated via sprintf into the unquoted shell command /etc/rrd/graphinterface %s %s and executed by...
CVE-2026-75363
An issue in Comfast CF-WR630AX v.2.7.0.2 allows a remote attacker to execute arbitrary code via the /usr/bin/webmgnt, /cgi-bin/mbox-config, and the parameters timestr, displayn...
PT-2026-82302
Name of the Vulnerable Software and Affected Versions Comfast CF-WR630AX version 2.7.0.2 Description A remote attacker can execute arbitrary code through the '/usr/bin/webmgnt' and '/cgi-bin/mbox-config' endpoints by manipulating the timestr and display n parameters. Recommendations At the moment...
CVE-2026-75364
Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX 2024-01-30 build, the updateinterfacepng SET handler in /usr/bin/webmgnt fails to sanitize the displayname parameter. User-controlled input is concatenated via sprintf into the unquoted shell command /etc/rrd/graphinterface %s %s and executed by...
CVE-2026-75363: Improper Neutralization of Special Elements used in an OS Command
An issue in Comfast CF-WR630AX v.2.7.0.2 allows a remote attacker to execute arbitrary code via the /usr/bin/webmgnt, /cgi-bin/mbox-config, and the parameters timestr, displayn...
CVE-2026-75364: Improper Neutralization of Special Elements used in an OS Command
Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX 2024-01-30 build, the updateinterfacepng SET handler in /usr/bin/webmgnt fails to sanitize the displayname parameter. User-controlled input is concatenated via sprintf into the unquoted shell command /etc/rrd/graphinterface %s %s and executed by...
EUVD-2026-66744
Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX 2024-01-30 build, the updateinterfacepng SET handler in /usr/bin/webmgnt fails to sanitize the displayname parameter. User-controlled input is concatenated via sprintf into the unquoted shell command /etc/rrd/graphinterface %s %s and executed by...
CVE-2026-75363
An issue in Comfast CF-WR630AX v.2.7.0.2 allows a remote attacker to execute arbitrary code via the /usr/bin/webmgnt, /cgi-bin/mbox-config, and the parameters timestr, displayn...
PT-2026-82303
Name of the Vulnerable Software and Affected Versions Comfast CF-N1-S version 2.6.0.1 Comfast CF-WR630AX version 2024-01-30 build Description The update interface png SET handler in /usr/bin/webmgnt fails to sanitize the display name parameter. User-controlled input is concatenated via sprintf in...
EUVD-2026-64604
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET§ion=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...