CVE-2026-77683
Received Received - Intake

Command Injection in Comfast CF-N1-S Firmware

Publication date: 2026-08-21

Last updated on: 2026-08-21

Assigner: VulDB

Description
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-21
Last Modified
2026-08-21
Generated
2026-08-21
AI Q&A
2026-08-21
EPSS Evaluated
N/A
NVD
CVE-2026-77683
EUVD
EUVD-2026-63884

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
comfast cf-n1-s 2.6.0.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
CWE-74 The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a command injection flaw in the Comfast CF-N1-S router firmware version 2.6.0.1. It exists in the web management interface's /cgi-bin/mbox-config endpoint when handling the timestr parameter. Attackers can inject malicious shell commands through this parameter, which are then executed with root privileges via the system function.

Detection Guidance

Check if the Comfast CF-N1-S router is running firmware version V2.6.0.1. Send a crafted HTTP POST request to /cgi-bin/mbox-config?method=SET&section=ntp_timezone with empty timestr and ntp_client_enabled set to 0 to test for command injection.

Impact Analysis

An attacker could exploit this to execute arbitrary commands on the router, potentially gaining full control. This might allow theft of sensitive data like Wi-Fi passwords, network credentials, or installation of backdoors for persistent access. The flaw enables remote code execution even with basic authentication.

Compliance Impact

This vulnerability allows remote code execution on the Comfast CF-N1-S router, potentially exposing sensitive network data such as Wi-Fi passwords and credentials. For GDPR, this could lead to unauthorized access to personal data, violating confidentiality and integrity requirements. Under HIPAA, if the device handles protected health information, the breach could result in unauthorized disclosure, compromising compliance with security and privacy rules.

Mitigation Strategies

Update the Comfast CF-N1-S firmware to a patched version. Disable remote access to the web management interface if not required. Restrict network access to the router's management interface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77683. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart