CVE-2026-77683
CRITICAL
NVD
CVSS Score
9.9
Severity
CRITICAL
Published
Aug 21, 2026
Vendor
unknown
Description
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET§ion=ntp_timezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.