CVE-2026-94003: Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow
A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function getcsspathfromuri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What systems are exposed to this issue?
Comfast CF-N1-S devices running version 2.6.0.1 are identified as affected when their Web Management Interface is reachable by an attacker. The vulnerable endpoint is /cgi-bin/mbox-config.
Does exploitation require authentication or user interaction?
No. The supplied vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction.
How serious could successful exploitation be?
The reported impact includes high confidentiality, integrity, and availability impact, with scope changed. This means successful exploitation could compromise the vulnerable device and potentially affect resources beyond the vulnerable component.
Is public exploit information available?
Yes. The vulnerability information states that an exploit has been publicly disclosed and may be used.