CVE-2026-77148
CriticalCVSS 9.9Summary
A vulnerability in Comfast CF-N1-S version 2.6.0.1 affects the function sub_44B50C in the file /cgi-bin/mbox-config?method=SET§ion=ptest_channel. Manipulation results in a stack-based buffer overflow, and the attack can be launched remotely. The exploit has been made public and could be used.
Risk Assessment
The risk includes remote code execution or device crash, potentially leading to compromise of the network device.
Recommendation
Immediately update the device firmware to the latest version and restrict access to the management interface.
Original NVD description (English source)
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub_44B50C of the file /cgi-bin/mbox-config?method=SET§ion=ptest_channel of the component Web Management. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.