Comfast Cf Ac100 Firmware
1 CVEs
product
Monthly
Command injection in Comfast CF-AC100 firmware via the ping_config request handler allows remote attackers with high privileges to execute arbitrary commands on affected devices. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor despite early disclosure notification.
Command Injection
Comfast Cf Ac100 Firmware
NVD
GitHub
VulDB
CVSS 3.1
4.7
EPSS
0.1%
CVE-2026-3798
EPSS 0%
CVSS 4.7
MEDIUM
POC
This Month
Command injection in Comfast CF-AC100 firmware via the ping_config request handler allows remote attackers with high privileges to execute arbitrary commands on affected devices. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor despite early disclosure notification.
Command Injection
Comfast Cf Ac100 Firmware
NVD
GitHub
VulDB