What is GHSA-j7x2-7p87-73vg?

GHSA-j7x2-7p87-73vg is a security advisory published by GitHub Security Advisories with High severity. A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub_44B50C of the...

Which CVE IDs does GHSA-j7x2-7p87-73vg cover?

GHSA-j7x2-7p87-73vg covers the following CVE IDs: CVE-2026-77148. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j7x2-7p87-73vg?

GHSA-j7x2-7p87-73vg has a CVSS v3 base score of 9.9, published by GitHub Security Advisories.

GHSA-j7x2-7p87-73vgHighCVSS 9.9

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub_44B50C of the...

Vendor

GitHub Security Advisories

Published

August 20, 2026

Last Modified

August 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-77148 →

📋 Description

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub_44B50C of the file /cgi-bin/mbox-config?method=SET&section=ptest_channel of the component Web Management. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2026-77148
https://github.com/AdminSafe/CVE/issues/7
https://vuldb.com/cve/CVE-2026-77148
https://vuldb.com/submit/880910
https://vuldb.com/vuln/393733
https://vuldb.com/vuln/393733/cti
https://github.com/advisories/GHSA-j7x2-7p87-73vg