CVE-2026-3798

CVE-2026-3798 affects Comfast CF-AC100 with firmware 2.6.0.8. The vulnerability lies in function sub_44AC14 within /cgi-bin/mbox-config?method=SET&section=ping_config (Request Path Handler), enabling remote command injection. The issue is exploitable over networks, with public exploit availabilit...