PT-2026-8311 · Comfast · Comfast Cf-N1 V2

Allanp0E · Published 2026-02-16 · Updated 2026-02-16 · CVE-2026-2535

Positive Technologies · (AI Summary)

CVSS v2.0

6.5

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Comfast CF-N1 V2 version 2.6.0.2

Description A command injection issue exists in Comfast CF-N1 V2. The issue is located in the

sub 44AB9C

function of the

/cgi-bin/mbox-config

file. Manipulation of the

channel

parameter in the

ptest channel

section of the API endpoint

/cgi-bin/mbox-config?method=SET&section=ptest channel

can lead to command injection. The attack can be initiated remotely.

Recommendations Versions prior to 2.6.0.2 are not affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Special Elements Injection

Weakness Enumeration

CWE-77

CWE-74

Related Identifiers

CVE-2026-2535

Affected Products

Comfast Cf-N1 V2

References · 10

• 🔥 https://github.com/jinhao118/cve/blob/main/ComFast%20Router_2.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-2535 · Security Note
• https://vuldb.com/?ctiid.346123 · Note
• https://twitter.com/CVEarity/status/2023318424462762043 · Twitter Post
• https://twitter.com/NewsNerdie/status/2023299074049314921 · Twitter Post
• https://twitter.com/CVEnew/status/2023272635967164610 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2023270331507495335 · Twitter Post
• https://vuldb.com/?submit.748784 · Note
• https://vuldb.com/?id.346123 · Note
• https://t.me/cveNotify/152085 · Telegram Post