Is CVE-2026-77148 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-77148?

CVE-2026-77148 has a CVSS v3 severity of CRITICAL (9.9).

Back

CVE-2026-77148

Description

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub_44B50C of the file /cgi-bin/mbox-config?method=SET&section=ptest_channel of the component Web Management. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.