CVE-2026-75094

creationtimestamp| type| source ---|---|--- 2026-08-18 02:57:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gh7s7jj7f6qin 2026-08-18 03:00:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtd7y6ye542z 2026-08-18 03:00:28+00:00| seen|...

CVE-2026-75094

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptestssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. Th...

CVE-2026-75094

COMFAST CF-N1-S firmware 2.6.0.1 has an OS command injection flaw in the CGI endpoint /cgi-bin/mbox-config?method=SET&section=ptest_ssid (function sub_44B438): the ssid parameter is passed unsanitized to a shell, enabling remote attackers with high privileges to execute arbitrary OS commands. CVS...