Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-94003

Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow

CVSS 4.0 10.0 CRITICALCVSS 3.1 10.0 CRITICALCVSS 3.0 10.0 CRITICALCVSS 2.0 10.0 Check source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-94003

Published

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-94003

Published

CF-N1-S

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Comfast",
                    "product": "CF-N1-S",
                    "versions": [
                        {
                            "version": "2.6.0.1",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:comfast:cf-n1-s:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "Web Management Interface"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON