What is GHSA-qp57-ch36-236j?

GHSA-qp57-ch36-236j is a security advisory published by GitHub Security Advisories with High severity. A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the...

Which CVE IDs does GHSA-qp57-ch36-236j cover?

GHSA-qp57-ch36-236j covers the following CVE IDs: CVE-2026-75094. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qp57-ch36-236j?

GHSA-qp57-ch36-236j has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

GHSA-qp57-ch36-236jHighCVSS 9.1

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the...

Vendor

GitHub Security Advisories

Published

August 18, 2026

Last Modified

August 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-75094 →

📋 Description

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptest_ssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2026-75094
https://github.com/1ChaoRen1/IOT_1
https://vuldb.com/cve/CVE-2026-75094
https://vuldb.com/submit/877482
https://vuldb.com/vuln/391346
https://vuldb.com/vuln/391346/cti
https://github.com/advisories/GHSA-qp57-ch36-236j