CVE-2026-77022: Comfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflow
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function sub44B438 of the file /cgi-bin/mbox-config?method=SET§ion=ptestssid of the component SSID Configuration. The manipulation of the argument ssid results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Block remote access to the vulnerable endpoint /cgi-bin/mbox-config?method=SET§ion=ptest_ssid at the network edge (e.g., firewall/ACL) to prevent exploitation of the stack-based overflow in SSID Configuration (sub_44B438).
- Compensating control
Restrict access to the SSID Configuration CGI interface (mbox-config) so only authorized/admin clients can reach it, since the attack can be executed remotely.
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vector indicates that exploitation is remote and requires low privileges. No user interaction is required.
Is public exploit code available?
Yes. The available information states that an exploit has been released publicly and may be used in attacks.
Which systems should be prioritized for assessment?
Prioritize Comfast CF-N1-S devices running version 2.6.0.1, particularly where the SSID Configuration interface exposes the mbox-config endpoint with the ptest_ssid section.