Comfast - Cf-n1-s - CRITICAL - CVE-2026-77683. A security flaw has been identified in the Comfast CF-N1-S, specifically in version 2.6.0.1. The vulnerability affects the /cgi-bin/mbox-config?method=SET§ion=ntp_timezone file, where manipulation of the 'timestr' argument can lead to command injection attacks. This vulnerability can be exploited remotely, allowing attackers to execute arbitrary commands on the affected device. The exploit has been made public, necessitating prompt action to protect vulnerable systems from potential threats. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io