01 Record

CVE-2026-77683

Comfast CF-N1-S mbox-config system command injection

CriticalPUBLISHEDCNA: VulDB

Base score9.4 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P

02 Description

Comfast CF-N1-S mbox-config system command injection

Published

2026-08-21 10:15Z15 HR AGO

Last updated

2026-08-21 13:52Z11 HR AGO

Reserved

2026-08-21

Assigning CNA

VulDB

Record state

PUBLISHED

Severity

Critical (CVSS 9.4)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P

Weaknesses

CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Class
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')Class

SSVC decision

ExploitationpocAutomatablenoTechnical Impacttotal

Data version

5.2

Document digest

96f755044e038d0ecf0d1d8d62ed2f485acc45456c94f2c2ce21dc1ba8a8372c

VendorProductVersionsPlatforms

ComfastCF-N1-S2.6.0.1—

vuldb.comVDB-394033 | Comfast CF-N1-S mbox-config system command injectionhttps://vuldb.com/vuln/394033vdb-entrytechnical-description
vuldb.comVDB-394033 | CTI Indicators (IOB, IOC, TTP, IOA)https://vuldb.com/vuln/394033/ctisignaturepermissions-required
vuldb.comCVE-2026-77683 | CVE Analysis and Reporthttps://vuldb.com/cve/CVE-2026-77683third-party-advisory
vuldb.comSubmit #881058 | Comfast CF-N1-S V2.6.0.1 Command Injectionhttps://vuldb.com/submit/881058third-party-advisory
github.comhttps://github.com/AdminSafe/CVE/issues/8exploitissue-tracking