CVE-2026-75094

CRITICAL 9.1CVE-2026-75094 · Published 18/08/2026 · updated 22/10/2026

In short

CVE-2026-75094 is a CRITICAL (CVSS 9.1) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 3.2%, higher than 88.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptest_ssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.

References

1ChaoRen1/IOT_1
vuldb.com/cve/CVE-2026-75094
vuldb.com/submit/877482
vuldb.com/vuln/391346
vuldb.com/vuln/391346/cti

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free