CVE-2026-75094 | COMFAST CF-N1-S 2.6.0.1 CGI Interface mbox-config?method=SET&section=ptest_ssid sub_44B438 os command injection

August 17, 2026 Yanac

A vulnerability has been found in COMFAST CF-N1-S 2.6.0.1 and classified as very critical. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptest_ssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection.

This vulnerability is registered as CVE-2026-75094. Remote exploitation of the attack is possible. Furthermore, an exploit is available.VulDB Recent EntriesRead More