CVE Catalog
CVE-2026-76008
CriticalCVSS 10.0Summary
A flaw has been found in Comfast CF-N1-S 2.6.0.1, affecting the function get_para_from_uri in /cgi-bin/mbox-config. Manipulation of width/height arguments causes stack-based buffer overflow. The attack can be initiated remotely.
Risk Assessment
Remote exploitation could lead to arbitrary code execution or device crash, compromising network integrity and availability.
Recommendation
Update the firmware to the latest version if available and restrict access to the administrative interface.
Original NVD description (English source)
A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_uri of the file /cgi-bin/mbox-config of the component URI Parameter Parsing. This manipulation of the argument width/height causes stack-based buffer overflow. The attack can be initiated remotely.