CVE-2026-75364
Medium
Description
Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX (2024-01-30 build), the update_interface_png SET handler in /usr/bin/webmgnt fails to sanitize the display_name parameter. User-controlled input is concatenated via sprintf() into the unquoted shell command `/etc/rrd/graphinterface %s %s` and executed by system() with root privileges. A remote authenticated attacker can inject arbitrary commands
SeverityMedium
CVSS6.8
Exploit probability—
ProductCF-N1-S firmware
PublishedAug 26, 2026
First seenAug 26, 2026
Weakness typeCWE-78OS command injection
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Comfast CF-N1-S firmware | 2.6.0.1 | — |
| Comfast CF-WR630AX | 2024-01-30 build | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.