Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-76008

Comfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflow

Description

A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_uri of the file /cgi-bin/mbox-config of the component URI Parameter Parsing. This manipulation of the argument width/height causes stack-based buffer overflow. The attack can be initiated remotely.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Comfast CF-N1-S

  • 2.6.0.1affected

References