CVE-2025-9581 | Comfast CF-N1 2.6.0 /usr/bin/webmgnt multi_pppoe phy_interface command injection

August 28, 2025 Yanac

A vulnerability, which was classified as critical, has been found in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing manipulation of the argument phy_interface results in command injection.

This vulnerability was named CVE-2025-9581. The attack may be initiated remotely. In addition, an exploit is available.VulDB Recent EntriesRead More