PT-2026-82303

Name of the Vulnerable Software and Affected Versions Comfast CF-N1-S version 2.6.0.1 Comfast CF-WR630AX version 2024-01-30 build Description The update interface png SET handler in /usr/bin/webmgnt fails to sanitize the display name parameter. User-controlled input is concatenated via sprintf in...

CVE-2026-75364

Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX 2024-01-30 build, the updateinterfacepng SET handler in /usr/bin/webmgnt fails to sanitize the displayname parameter. User-controlled input is concatenated via sprintf into the unquoted shell command /etc/rrd/graphinterface %s %s and executed by...