CVE-2026-77148

Name of the Vulnerable Software and Affected Versions Comfast CF-N1-S version 2.6.0.1

Description A stack-based buffer overflow exists in the Web Management component. This issue occurs within the sub 44B50C() function of the '/cgi-bin/mbox-config?method=SET&section=ptest channel' endpoint. A remote attacker can exploit this by manipulating the input to trigger the overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/cgi-bin/mbox-config?method=SET&section=ptest channel' endpoint to minimize the risk of exploitation.