CF-AC100 vulnerabilities

1 known vulnerability in CF-AC100 from Comfast. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  CF-AC100: Improper Neutralization of Special Elements used in a Command

  CVE-2026-3798Mar 9, 2026ComfastEPSS 17%

  A vulnerability was detected in Comfast CF-AC100 2.6.0.8. This affects the function sub_44AC14 of the file /cgi-bin/mbox-config?method=SET&section=ping_config of the component Request Path Handler. The manipulation results in command injection. The attack may