PT-2026-24006 · Comfast · Comfast Cf-Ac100

Allanp0E + 1 · Published 2026-03-09 · Updated 2026-03-09 · CVE-2026-3798

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Comfast CF-AC100 version 2.6.0.8

Description A command injection issue exists in the Request Path Handler component of Comfast CF-AC100 version 2.6.0.8. The issue is located in the sub 44AC14 function of the /cgi-bin/mbox-config?method=SET&section=ping config file. Manipulation of this component can lead to command injection. The attack can be launched remotely. The exploit is publicly available. The vendor was notified but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Special Elements Injection

Weakness Enumeration

CWE-77

CWE-74

Related Identifiers

CVE-2026-3798

Affected Products

Comfast Cf-Ac100

References · 11

• 🔥 https://github.com/jinhao118/cve/blob/main/ComFast%20CF-AC100-V2.6.0.8_1.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-3798 · Security Note
• https://osv.dev/vulnerability/CVE-2026-3798 · Vendor Advisory
• https://vuldb.com/?submit.766443 · Note
• https://twitter.com/infoflowcloud/status/2031123128386986310 · Twitter Post
• https://vuldb.com/?ctiid.349765 · Note
• https://twitter.com/CVEnew/status/2031122592208146938 · Twitter Post
• https://t.me/CVEtracker/46855 · Telegram Post
• https://vuldb.com/?id.349765 · Note
• https://t.me/cveNotify/154740 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2030880152683413924 · Twitter Post