CVE-2026-77004

Comfast CF-N1-S firmware 2.6.0.1 exposes a command injection flaw in the sprintf function at /cgi-bin/mbox-config?method=SET&section=ptest_sn. Remote attackers with low privileges can manipulate the sn argument to execute arbitrary commands; a proof-of-concept exploit has been published. No patch...