Loading market data...
← Back to CVE feed

CVE-2026-94003

CRITICAL CVSS 10.0 View on NVD ↗

Description

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Published: Sep 20, 2026 12:17 UTC Modified: Sep 20, 2026 12:17 UTC