Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in Comfast CF-E7 2.6.0.9. This affects the function sub_441CF4 of the file /cgi-bin/mbox-config?method=SET§ion=ping_config of the component webmggnt. Executing a manipulation of the argument destination can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-2824 Remote Command Injection in Comfast CF-E7 Webmggnt via Ping Configuration https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2824
Post summary
The text announces CVE‑2026‑2824, a remote command injection vulnerability in Comfast CF‑E7 Webmggnt via ping configuration, without providing PoC, exploit code, patch, or evidence of active exploitation.
CVE-2026-2824 A flaw has been found in Comfast CF-E7 2.6.0.9. This affects the function sub_441CF4 of the file /cgi-bin/mbox-config?method=SET&section=ping_config of the component we… https://www.cve.org/CVERecord?id=CVE-2026-2824
Post summary
A flaw was discovered in Comfast CF‑E7 firmware 2.6.0.9 affecting a configuration endpoint; no exploitation details, patch, or PoC are provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | comfast | cf-e7 | - | - | - |
| OS | comfast | cf-e7_firmware | 2.6.0.9 | - | - |