Comfast Cf-n1 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Comfast Cf-n1 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2025-9581 — CVSS 6.3 (medium): A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing…
• CVE-2025-9582 — CVSS 6.3 (medium): A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of…
• CVE-2025-9583 — CVSS 6.3 (medium): A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file…
• CVE-2025-9584 — CVSS 6.3 (medium): A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt…
• CVE-2025-9585 — CVSS 6.3 (medium): A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt…
• CVE-2025-9586 — CVSS 6.3 (medium): A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file…
• CVE-2026-2534 — CVSS 6.3 (medium): A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub_44AC4C of the file…
• CVE-2026-2535 — CVSS 6.3 (medium): A vulnerability was found in Comfast CF-N1 V2 2.6.0.2. The impacted element is the function sub_44AB9C of the file /cgi-bin/mbox-config?meth…