CVE-2025-9585

Name of the Vulnerable Software and Affected Versions Comfast CF-N1 version 2.6.0

Description A vulnerability exists in Comfast CF-N1 version 2.6.0 due to command injection. Manipulation of the portal delete picname argument within the wifilith delete pic file function, located in the /usr/bin/webmgnt file, allows for remote execution of commands. The exploit for this issue has been publicly disclosed.

Recommendations Update to a newer version of Comfast CF-N1 that addresses this issue. As a temporary workaround, restrict access to the /usr/bin/webmgnt file. Avoid using the portal delete picname parameter in the wifilith delete pic file function until the issue is resolved.