CVE-2025-9582 | Comfast CF-N1 2.6.0 /usr/bin/webmgnt ntp_timezone timestr command injection

A vulnerability, which was classified as critical, was found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of the argument timestr can lead to command injection.

The identification of this vulnerability is CVE-2025-9582. The attack may be launched remotely. Furthermore, there is an exploit available.