Security Advisory

CVE-2026-77683

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-21 10:15:08
Last updated 2026-08-21 13:52:02
Assigner VulDB
CVSS score 9.9
State PUBLISHED

Description

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.