Cf-e7 Firmware vulnerabilities

2 known vulnerabilities in Cf-e7 Firmware from Comfast. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  CF-E7: Improper Neutralization of Special Elements used in a Command

  CVE-2026-2824Feb 20, 2026ComfastEPSS 17.1%

  A flaw has been found in Comfast CF-E7 2.6.0.9. This affects the function sub_441CF4 of the file /cgi-bin/mbox-config?method=SET&section=ping_config of the component webmggnt. Executing a manipulation of the argument destination can lead to command injection.

• 8.8 High severity

  CF-E7: Improper Neutralization of Special Elements used in a Command

  CVE-2026-2823Feb 20, 2026ComfastEPSS 18.8%

  A vulnerability was detected in Comfast CF-E7 2.6.0.9. The impacted element is the function sub_41ACCC of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone of the component webmggnt. Performing a manipulation of the argument timestr results in comm