CVE-2026-77022: Stack-based Buffer Overflow in Comfast CF-N1-S

This vulnerability is a stack-based buffer overflow in the Comfast CF-N1-S device firmware version 2.6.0.1. It occurs in the function sub_44B438 within the SSID Configuration component, triggered by crafted input to the ssid parameter via the /cgi-bin/mbox-config?method=SET&section=ptest_ssid CGI endpoint. The flaw allows remote attackers to execute code or cause denial of service by overflowing the stack buffer. Exploit code is publicly available, which may facilitate exploitation.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device. Given the high CVSS score of 9.4 and the presence of public exploit code, the impact is critical, potentially allowing attackers to fully compromise the device remotely without user interaction.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the vulnerable endpoint and monitor for exploit attempts. Consider network-level controls to limit exposure.