CVE-2026-6799 | Comfast CF-N1-S 2.6.0.1 Endpoint mbox-config?method=SET&section=ping_config destination command injection

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cgi-bin/mbox-config?method=SET&section=ping_config of the component Endpoint. Performing a manipulation of the argument destination results in command injection.

This vulnerability is identified as CVE-2026-6799. The attack can be initiated remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More