CVE-2026-77022
CriticalCVSS 9.9Summary
In Comfast CF-N1-S version 2.6.0.1, the function sub_44B438 in /cgi-bin/mbox-config?method=SET§ion=ptest_ssid (SSID Configuration component) has a stack-based buffer overflow via the ssid argument.
Risk Assessment
An attacker can remotely trigger a buffer overflow, potentially leading to code execution or device crash.
Recommendation
Apply available firmware updates or restrict network access to the device.
Original NVD description (English source)
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET§ion=ptest_ssid of the component SSID Configuration. The manipulation of the argument ssid results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.