VYPR

CF-WR631AX V3

by Comfast

CVEs (2)

  • CVE-2026-15511Jul 12, 2026
    risk 0.00cvss epss 0.03

    A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerability is the function system_wl_upload_pic_file of the file /usr/bin/webmgnt of the component FastCGI Backend. This manipulation of the argument filename causes os command injection.…

  • CVE-2026-12814Jun 21, 2026
    risk 0.00cvss epss 0.02

    A flaw has been found in Comfast CF-WR631AX V3 up to 2.7.0.8. This issue affects the function system of the file /cgi-bin/mbox-config?section=ping_config of the component API Endpoint. This manipulation of the argument destination causes os command injection. The attack is…