CVE-2026-7834
CriticalSummary
A vulnerability has been detected in EFM ipTIME NAS1dual 1.5.24 affecting the function get_csrf_whites in the file /cgi/advanced/misc_main.cgi. Manipulation of this function leads to stack-based buffer overflow.
Risk Assessment
An attacker can remotely exploit this vulnerability, posing a serious security threat to the system. The public disclosure of the exploit increases the risk of attacks.
Recommendation
It is recommended to immediately update the software to the latest version to eliminate this vulnerability. Additionally, monitor systems for potential attack attempts.
Original NVD description (English source)
A security vulnerability has been detected in EFM ipTIME NAS1dual 1.5.24. This issue affects the function get_csrf_whites of the file /cgi/advanced/misc_main.cgi. Such manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.