CVE-2026-78050: Stack-based Buffer Overflow in Comfast CF-N1-S

CVE-2026-78050 is a stack-based buffer overflow vulnerability in Comfast CF-N1-S firmware version 2.6.0.1. The flaw is located in the Web Management interface, specifically in the function sub_41AD7C within the /cgi-bin/mbox-config?method=SET&section=ntp_timezone CGI endpoint. By manipulating the timestr or ntp_client_enabled parameters, an attacker can cause a buffer overflow remotely. This vulnerability allows for potential remote code execution or system compromise. Public exploit code is available, but no official patch or remediation guidance has been provided by the vendor at this time.

Successful exploitation of this vulnerability can lead to complete compromise of the affected device, including unauthorized code execution and full control over the system. The vulnerability affects confidentiality, integrity, and availability, making it highly critical. Since the exploit is publicly available, the risk of active exploitation is elevated despite no confirmed in-the-wild attacks reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected Web Management interface to trusted networks only and monitor for suspicious activity targeting the /cgi-bin/mbox-config endpoint. Consider disabling the vulnerable service if feasible. Avoid exposing the device management interface to untrusted networks.