CVE-2025-9585 | Comfast CF-N1 2.6.0 /usr/bin/webmgnt wifilith_delete_pic_file portal_delete_picname command injection

A vulnerability was found in Comfast CF-N1 2.6.0. It has been classified as critical. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt. This manipulation of the argument portal_delete_picname causes command injection.

This vulnerability is tracked as CVE-2025-9585. The attack is possible to be carried out remotely. Moreover, an exploit is present.