VYPR

CF-E4

by Comfast

Source repositories

CVEs (1)

  • CVE-2026-2537MedFeb 16, 2026
    risk 0.31cvss 4.7epss 0.00

    A vulnerability was identified in Comfast CF-E4 2.6.0.1. This impacts an unknown function of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone of the component HTTP POST Request Handler. Such manipulation of the argument timestr leads to command injection. The attack…