Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET§ion=ptest_ssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-75094 A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptest_ssid of the component… https://www.cve.org/CVERecord?id=CVE-2026-75094
Post summary
A vulnerability identified as CVE-2026-75094 affects a function in COMFAST CF-N1-S 2.6.0.1's web interface component; no PoC, exploit, active exploitation, or remediation details are provided.
CyberSec Daily ✓ · 📡 Network Security · August 18, 2026 🎯 Critical COMFAST appliance vulnerability published with a 9.1 severity score A new vulnerability tracked as CVE-2026-75094 has been published for the COMFAST CF-N1-S network appliance. The issue is classified as an OS command-injection vulnerability and carries a reported CVSS score of 9.1. Public vulnerability intelligence indicates that remote exploitation is possible and that exploit information has become publicly available. Organizations using the affected appliance should therefore treat internet-exposed instances as particularly sensitive while checking vendor remediation guidance. 🔗 Source: CVE vulnerability data / TheHackerWire #COMFAST #CVE202675094 #NetworkSecurity #Vulnerability #CyberSecurity #IoTSecurity #PatchManagement
Post summary
A high‑severity OS command‑injection vulnerability (CVE-2026-75094) has been disclosed for the COMFAST CF‑N1‑S appliance, with public exploit information available but no report of active exploitation.
CVE-2026-75094 Command Injection in COMFAST CF-N1-S CGI Interface via ssid Argument https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-75094
Post summary
A brief disclosure lists CVE-2026-75094 as a command injection vulnerability in COMFAST CF‑N1‑S’s CGI interface, with no PoC, exploit code, or patch information provided.