CVE-2026-77022: Stack-based Buffer Overflow in Comfast CF-N1-S
CVE-2026-77022 is a critical stack-based buffer overflow vulnerability in Comfast CF-N1-S version 2.6.0.1. It affects the SSID Configuration component, specifically the function handling the ssid argument in the /cgi-bin/mbox-config?method=SET§ion=ptest_ssid endpoint. This flaw can be exploited remotely without user interaction. Public exploit code is available, increasing the risk of attacks. No official patch or remediation guidance has been provided yet.
AI Analysis
Technical Summary
This vulnerability involves a stack-based buffer overflow in the Comfast CF-N1-S device firmware version 2.6.0.1. The issue is located in the function sub_44B438 within the SSID Configuration component, triggered by manipulation of the ssid argument in the specified CGI endpoint. The flaw allows remote attackers to execute a buffer overflow, potentially leading to arbitrary code execution or denial of service. Exploit code has been publicly released, but no official fix or patch has been announced by the vendor.
Potential Impact
Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device. Given the critical CVSS score of 9.4 and the availability of public exploit code, the risk of compromise is high. The vulnerability requires no user interaction and can be triggered remotely, increasing its severity.
Mitigation Recommendations
No official patch or remediation guidance is currently available from the vendor. Users should monitor vendor advisories for updates. Until a fix is released, consider restricting access to the affected endpoint or isolating the device from untrusted networks to reduce exposure.
CVE-2026-77022: Stack-based Buffer Overflow in Comfast CF-N1-S
Description
CVE-2026-77022 is a critical stack-based buffer overflow vulnerability in Comfast CF-N1-S version 2.6.0.1. It affects the SSID Configuration component, specifically the function handling the ssid argument in the /cgi-bin/mbox-config?method=SET§ion=ptest_ssid endpoint. This flaw can be exploited remotely without user interaction. Public exploit code is available, increasing the risk of attacks. No official patch or remediation guidance has been provided yet.
CVSS v4.0
Score 9.4critical
Affected software
cpe:2.3:a:comfast:cf-n1-s:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves a stack-based buffer overflow in the Comfast CF-N1-S device firmware version 2.6.0.1. The issue is located in the function sub_44B438 within the SSID Configuration component, triggered by manipulation of the ssid argument in the specified CGI endpoint. The flaw allows remote attackers to execute a buffer overflow, potentially leading to arbitrary code execution or denial of service. Exploit code has been publicly released, but no official fix or patch has been announced by the vendor.
Potential Impact
Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device. Given the critical CVSS score of 9.4 and the availability of public exploit code, the risk of compromise is high. The vulnerability requires no user interaction and can be triggered remotely, increasing its severity.
Mitigation Recommendations
No official patch or remediation guidance is currently available from the vendor. Users should monitor vendor advisories for updates. Until a fix is released, consider restricting access to the affected endpoint or isolating the device from untrusted networks to reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-08-20T08:33:45.881Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a8730d9acd9273b49e17191
Added to database: 08/20/2026, 16:52:41 UTC
Last enriched: 08/20/2026, 17:07:22 UTC
Last updated: 08/20/2026, 17:43:04 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.