{"schema_version":1,"title":"Comfast vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in Comfast: 1 in the last 7 days and 10 in the last 90 days, 6 of them critical and 0 exploited in the wild. The most recent, CVE-2026-94003, was published on 20 September 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/comfast","json_url":"https://junglewise.ai/threats/vendors/comfast.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/comfast","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":1,"all_time":11,"critical":6,"exploited":0,"last_7_days":1,"last_30_days":1,"last_90_days":10,"last_365_days":11},"latest":[{"cve":"CVE-2026-94003","cvss":10,"epss":0.0102,"slug":"cve-2026-94003-a-vulnerability-has-been-found-in-comfast-cf-n1-s-2-6-0-1","title":"Comfast CF-N1-S stack-based buffer overflow in web management","severity":"critical","exploited":false,"published_at":"2026-09-20T12:17:05.403+00:00","url":"https://junglewise.ai/threats/cve-2026-94003-a-vulnerability-has-been-found-in-comfast-cf-n1-s-2-6-0-1"},{"cve":"CVE-2026-75364","cvss":6.8,"epss":0.0041,"slug":"cve-2026-75364-comfast-cf-n1-s-command-injection-in-webmgnt","title":"Comfast CF-N1-S command injection in webmgnt","severity":"medium","exploited":false,"published_at":"2026-08-26T21:16:40.97+00:00","url":"https://junglewise.ai/threats/cve-2026-75364-comfast-cf-n1-s-command-injection-in-webmgnt"},{"cve":"CVE-2026-75363","cvss":6.8,"epss":0.0046,"slug":"cve-2026-75363-comfast-cf-wr630ax-command-injection-in-webmgnt","title":"Comfast CF-WR630AX command injection in webmgnt","severity":"medium","exploited":false,"published_at":"2026-08-26T21:16:40.857+00:00","url":"https://junglewise.ai/threats/cve-2026-75363-comfast-cf-wr630ax-command-injection-in-webmgnt"},{"cve":"CVE-2026-78050","cvss":9.9,"epss":0.0079,"slug":"cve-2026-78050-comfast-cf-n1-s-stack-buffer-overflow-in-ntp-timezone","title":"Comfast CF-N1-S stack buffer overflow in NTP timezone configuration","severity":"critical","exploited":false,"published_at":"2026-08-23T00:16:50.59+00:00","url":"https://junglewise.ai/threats/cve-2026-78050-comfast-cf-n1-s-stack-buffer-overflow-in-ntp-timezone"},{"cve":"CVE-2026-77683","cvss":9.9,"epss":0.0289,"slug":"cve-2026-77683-comfast-cf-n1-s-command-injection-in-ntp-timezone","title":"Comfast CF-N1-S command injection in NTP timezone","severity":"critical","exploited":false,"published_at":"2026-08-21T11:17:06.457+00:00","url":"https://junglewise.ai/threats/cve-2026-77683-comfast-cf-n1-s-command-injection-in-ntp-timezone"},{"cve":"CVE-2026-77148","cvss":9.9,"epss":0.0079,"slug":"cve-2026-77148-comfast-cf-n1-s-stack-based-buffer-overflow-in-web-management","title":"Comfast CF-N1-S stack-based buffer overflow in web management","severity":"critical","exploited":false,"published_at":"2026-08-20T19:17:04.71+00:00","url":"https://junglewise.ai/threats/cve-2026-77148-comfast-cf-n1-s-stack-based-buffer-overflow-in-web-management"},{"cve":"CVE-2026-77022","cvss":9.9,"epss":0.0079,"slug":"cve-2026-77022-comfast-cf-n1-s-stack-based-buffer-overflow-in-ssid-configuration","title":"Comfast CF-N1-S stack-based buffer overflow in SSID configuration","severity":"critical","exploited":false,"published_at":"2026-08-20T17:19:49.413+00:00","url":"https://junglewise.ai/threats/cve-2026-77022-comfast-cf-n1-s-stack-based-buffer-overflow-in-ssid-configuration"},{"cve":"CVE-2026-77004","cvss":7.4,"epss":0.0177,"slug":"cve-2026-77004-comfast-cf-n1-s-command-injection-in-mbox-config","title":"Comfast CF-N1-S command injection in mbox-config","severity":"high","exploited":false,"published_at":"2026-08-20T16:18:31.58+00:00","url":"https://junglewise.ai/threats/cve-2026-77004-comfast-cf-n1-s-command-injection-in-mbox-config"},{"cve":"CVE-2026-19976","cvss":6.6,"epss":0.0287,"slug":"cve-2026-19976-comfast-cf-n1-s-command-injection-in-mbox-config","title":"COMFAST CF-N1-S command injection in mbox-config","severity":"medium","exploited":false,"published_at":"2026-08-17T03:16:50.333+00:00","url":"https://junglewise.ai/threats/cve-2026-19976-comfast-cf-n1-s-command-injection-in-mbox-config"},{"cve":"CVE-2026-15511","cvss":9.8,"slug":"cve-2026-15511-comfast-cf-wr631ax-v3-command-injection-in-fastcgi-backend","title":"Comfast CF-WR631AX V3 command injection in FastCGI Backend","severity":"critical","exploited":false,"published_at":"2026-07-12T23:16:38.137+00:00","url":"https://junglewise.ai/threats/cve-2026-15511-comfast-cf-wr631ax-v3-command-injection-in-fastcgi-backend"},{"cve":"CVE-2026-12814","cvss":6.3,"slug":"cve-2026-12814-comfast-cf-wr631ax-v3-os-command-injection-in-ping-config-api","title":"Comfast CF-WR631AX V3 OS command injection in ping_config API","severity":"medium","exploited":false,"published_at":"2026-06-21T23:16:44.217+00:00","url":"https://junglewise.ai/threats/cve-2026-12814-comfast-cf-wr631ax-v3-os-command-injection-in-ping-config-api"}],"vendor":{"hub":true,"name":"Comfast","slug":"comfast","homepage":"http://www.comfast.cn/","description":"Manufacturer of wireless networking equipment including routers, adapters, and bridges.","url":"https://junglewise.ai/threats/vendors/comfast"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":4,"exploited":0,"vulnerabilities":6},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-94003","cvss":10,"epss":0.0102,"slug":"cve-2026-94003-a-vulnerability-has-been-found-in-comfast-cf-n1-s-2-6-0-1","title":"Comfast CF-N1-S stack-based buffer overflow in web management","severity":"critical","exploited":false,"published_at":"2026-09-20T12:17:05.403+00:00","url":"https://junglewise.ai/threats/cve-2026-94003-a-vulnerability-has-been-found-in-comfast-cf-n1-s-2-6-0-1"},{"cve":"CVE-2026-77683","cvss":9.9,"epss":0.0289,"slug":"cve-2026-77683-comfast-cf-n1-s-command-injection-in-ntp-timezone","title":"Comfast CF-N1-S command injection in NTP timezone","severity":"critical","exploited":false,"published_at":"2026-08-21T11:17:06.457+00:00","url":"https://junglewise.ai/threats/cve-2026-77683-comfast-cf-n1-s-command-injection-in-ntp-timezone"},{"cve":"CVE-2026-78050","cvss":9.9,"epss":0.0079,"slug":"cve-2026-78050-comfast-cf-n1-s-stack-buffer-overflow-in-ntp-timezone","title":"Comfast CF-N1-S stack buffer overflow in NTP timezone configuration","severity":"critical","exploited":false,"published_at":"2026-08-23T00:16:50.59+00:00","url":"https://junglewise.ai/threats/cve-2026-78050-comfast-cf-n1-s-stack-buffer-overflow-in-ntp-timezone"},{"cve":"CVE-2026-77148","cvss":9.9,"epss":0.0079,"slug":"cve-2026-77148-comfast-cf-n1-s-stack-based-buffer-overflow-in-web-management","title":"Comfast CF-N1-S stack-based buffer overflow in web management","severity":"critical","exploited":false,"published_at":"2026-08-20T19:17:04.71+00:00","url":"https://junglewise.ai/threats/cve-2026-77148-comfast-cf-n1-s-stack-based-buffer-overflow-in-web-management"},{"cve":"CVE-2026-77022","cvss":9.9,"epss":0.0079,"slug":"cve-2026-77022-comfast-cf-n1-s-stack-based-buffer-overflow-in-ssid-configuration","title":"Comfast CF-N1-S stack-based buffer overflow in SSID configuration","severity":"critical","exploited":false,"published_at":"2026-08-20T17:19:49.413+00:00","url":"https://junglewise.ai/threats/cve-2026-77022-comfast-cf-n1-s-stack-based-buffer-overflow-in-ssid-configuration"},{"cve":"CVE-2026-15511","cvss":9.8,"slug":"cve-2026-15511-comfast-cf-wr631ax-v3-command-injection-in-fastcgi-backend","title":"Comfast CF-WR631AX V3 command injection in FastCGI Backend","severity":"critical","exploited":false,"published_at":"2026-07-12T23:16:38.137+00:00","url":"https://junglewise.ai/threats/cve-2026-15511-comfast-cf-wr631ax-v3-command-injection-in-fastcgi-backend"},{"cve":"CVE-2026-77004","cvss":7.4,"epss":0.0177,"slug":"cve-2026-77004-comfast-cf-n1-s-command-injection-in-mbox-config","title":"Comfast CF-N1-S command injection in mbox-config","severity":"high","exploited":false,"published_at":"2026-08-20T16:18:31.58+00:00","url":"https://junglewise.ai/threats/cve-2026-77004-comfast-cf-n1-s-command-injection-in-mbox-config"},{"cve":"CVE-2026-75363","cvss":6.8,"epss":0.0046,"slug":"cve-2026-75363-comfast-cf-wr630ax-command-injection-in-webmgnt","title":"Comfast CF-WR630AX command injection in webmgnt","severity":"medium","exploited":false,"published_at":"2026-08-26T21:16:40.857+00:00","url":"https://junglewise.ai/threats/cve-2026-75363-comfast-cf-wr630ax-command-injection-in-webmgnt"},{"cve":"CVE-2026-75364","cvss":6.8,"epss":0.0041,"slug":"cve-2026-75364-comfast-cf-n1-s-command-injection-in-webmgnt","title":"Comfast CF-N1-S command injection in webmgnt","severity":"medium","exploited":false,"published_at":"2026-08-26T21:16:40.97+00:00","url":"https://junglewise.ai/threats/cve-2026-75364-comfast-cf-n1-s-command-injection-in-webmgnt"},{"cve":"CVE-2026-19976","cvss":6.6,"epss":0.0287,"slug":"cve-2026-19976-comfast-cf-n1-s-command-injection-in-mbox-config","title":"COMFAST CF-N1-S command injection in mbox-config","severity":"medium","exploited":false,"published_at":"2026-08-17T03:16:50.333+00:00","url":"https://junglewise.ai/threats/cve-2026-19976-comfast-cf-n1-s-command-injection-in-mbox-config"}],"generated_at":"2026-09-27T03:07:00.185062+00:00","technologies":[{"name":"Comfast CF-N1-S","slug":"cf-n1-s","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/cf-n1-s"}]}