CVE-2026-77148: Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflow
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub44B50C of the file /cgi-bin/mbox-config?method=SET§ion=ptestchannel of the component Web Management. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Comfast CF-N1-S devices running version 2.6.0.1 with the Web Management component reachable by an attacker are exposed. The attack can be launched remotely.
What level of access does an attacker need?
The supplied severity vector indicates that low privileges are required and no user interaction is needed. Exploitation targets the mbox-config CGI endpoint using the SET method and ptest_channel section.
Is public exploit code available?
Yes. The vulnerability information states that an exploit has been made public and could be used.