CVE-2026-77004: CVE-2026-77004: güvenlik açığı

Açıklama (NVD)

A flaw has been found in Comfast CF-N1-S 2.6.0.1. This impacts the function sprintf of the file /cgi-bin/mbox-config?method=SET&section=ptest_sn. Executing a manipulation of the argument sn can lead to command injection. The attack can be launched remotely. The exploit has been published and may be used.

Özet bilgiler

CVSS v3.1

7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

CVSS v4.0

2.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

%1,77 (yüzdelik 78)

CWE

CWE-74

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• vuldb.com
• vuldb.com
• vuldb.com
• vuldb.com
• CWE-74