CVE-2026-76008
Deferred Deferred - Pending Action

Stack-Based Buffer Overflow in Comfast CF-N1-S Firmware

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: VulDB

Description
A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_uri of the file /cgi-bin/mbox-config of the component URI Parameter Parsing. This manipulation of the argument width/height causes stack-based buffer overflow. The attack can be initiated remotely.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-19
Generated
2026-09-08
AI Q&A
2026-08-19
EPSS Evaluated
2026-09-07
NVD
CVE-2026-76008
EUVD
EUVD-2026-62224

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
comfast cf-n1-s 2.6.0.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a stack-based buffer overflow in Comfast CF-N1-S version 2.6.0.1. It occurs in the function get_para_from_uri when processing the width/height parameters from a URI. An attacker can remotely exploit this to cause a buffer overflow, potentially leading to arbitrary code execution or system crashes.

Detection Guidance

To detect this vulnerability, monitor network traffic for requests to /cgi-bin/mbox-config with unusual width/height parameters. Check for stack overflow errors in logs. Use tools like curl to test the endpoint: curl -v 'http://<target>/cgi-bin/mbox-config?width=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA'

Impact Analysis

This vulnerability allows remote attackers to execute arbitrary code on the affected device or cause denial-of-service conditions. Since it affects a network-facing component, exploitation could occur without user interaction, potentially compromising the device's integrity and confidentiality.

Compliance Impact

This vulnerability is a stack-based buffer overflow in Comfast CF-N1-S 2.6.0.1 that allows remote code execution. Such flaws can lead to unauthorized data access, modification, or exfiltration, which may violate GDPR (data protection) and HIPAA (health data confidentiality) by exposing sensitive information.

Mitigation Strategies

Immediately update the Comfast CF-N1-S firmware to the latest version to patch the stack-based buffer overflow in the URI Parameter Parsing function. If an update is unavailable, disable remote access to the /cgi-bin/mbox-config endpoint or restrict access via network segmentation and firewall rules.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76008. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart