<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 21 Sep 2026 16:05:14 +0000</lastBuildDate>
    <item>
      <title>34cfedc3-bd9a-4a04-bb61-146741828254</title>
      <link>https://vulnerability.circl.lu/sighting/34cfedc3-bd9a-4a04-bb61-146741828254/export</link>
      <description>{"uuid": "34cfedc3-bd9a-4a04-bb61-146741828254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://gist.github.com/ichintu/cfeb694d6cc595f396c823c83adfb7c0", "content": "CVE-2026-94003 is a critical (CVSS 10.0) remote stack-based buffer overflow vulnerability in the web management interface of the Comfast CF-N1-S router (v2.6.0.1). Located in the `get_css_path_from_uri` function, the flaw is actively exploitable and was publicly disclosed on September 20, 2026.", "creation_timestamp": "2026-09-20T16:01:22.045133Z"}</description>
      <content:encoded>{"uuid": "34cfedc3-bd9a-4a04-bb61-146741828254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://gist.github.com/ichintu/cfeb694d6cc595f396c823c83adfb7c0", "content": "CVE-2026-94003 is a critical (CVSS 10.0) remote stack-based buffer overflow vulnerability in the web management interface of the Comfast CF-N1-S router (v2.6.0.1). Located in the `get_css_path_from_uri` function, the flaw is actively exploitable and was publicly disclosed on September 20, 2026.", "creation_timestamp": "2026-09-20T16:01:22.045133Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/34cfedc3-bd9a-4a04-bb61-146741828254/export</guid>
      <pubDate>Sun, 20 Sep 2026 16:01:22 +0000</pubDate>
    </item>
    <item>
      <title>9a598e9d-4750-45de-aa58-c33d79d58d2b</title>
      <link>https://vulnerability.circl.lu/sighting/9a598e9d-4750-45de-aa58-c33d79d58d2b/export</link>
      <description>{"uuid": "9a598e9d-4750-45de-aa58-c33d79d58d2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxhsgk4kk2r", "content": "\ud83d\udd34 CVE-2026-94003 - Critical (10)\n\nA vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94003/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T15:03:49.686479Z"}</description>
      <content:encoded>{"uuid": "9a598e9d-4750-45de-aa58-c33d79d58d2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxhsgk4kk2r", "content": "\ud83d\udd34 CVE-2026-94003 - Critical (10)\n\nA vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94003/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T15:03:49.686479Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9a598e9d-4750-45de-aa58-c33d79d58d2b/export</guid>
      <pubDate>Sun, 20 Sep 2026 15:03:49 +0000</pubDate>
    </item>
    <item>
      <title>5d9079ca-800b-47e9-a976-950e157eec2d</title>
      <link>https://vulnerability.circl.lu/sighting/5d9079ca-800b-47e9-a976-950e157eec2d/export</link>
      <description>{"uuid": "5d9079ca-800b-47e9-a976-950e157eec2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvxen2e3jt2d", "content": "\ud83d\udea8 CVE-2026-94003 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri o...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94003\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-20T14:07:07.288456Z"}</description>
      <content:encoded>{"uuid": "5d9079ca-800b-47e9-a976-950e157eec2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvxen2e3jt2d", "content": "\ud83d\udea8 CVE-2026-94003 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri o...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94003\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-20T14:07:07.288456Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5d9079ca-800b-47e9-a976-950e157eec2d/export</guid>
      <pubDate>Sun, 20 Sep 2026 14:07:07 +0000</pubDate>
    </item>
    <item>
      <title>5844c3d0-9bf0-42b1-9eb5-bd8adbc6268a</title>
      <link>https://vulnerability.circl.lu/sighting/5844c3d0-9bf0-42b1-9eb5-bd8adbc6268a/export</link>
      <description>{"uuid": "5844c3d0-9bf0-42b1-9eb5-bd8adbc6268a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvxemzozox2g", "content": "\ud83d\udea8 CVE-2026-94003 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri o...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94003\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-20T14:07:06.583675Z"}</description>
      <content:encoded>{"uuid": "5844c3d0-9bf0-42b1-9eb5-bd8adbc6268a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvxemzozox2g", "content": "\ud83d\udea8 CVE-2026-94003 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri o...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94003\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-20T14:07:06.583675Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5844c3d0-9bf0-42b1-9eb5-bd8adbc6268a/export</guid>
      <pubDate>Sun, 20 Sep 2026 14:07:06 +0000</pubDate>
    </item>
    <item>
      <title>58301a27-d194-4bb4-86d9-860e2b920304</title>
      <link>https://vulnerability.circl.lu/sighting/58301a27-d194-4bb4-86d9-860e2b920304/export</link>
      <description>{"uuid": "58301a27-d194-4bb4-86d9-860e2b920304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvxadcce732w", "content": "CVE-2026-94003 - cf-n1-s\nThe web management page of the Comfast CF-N1-S router (version 2.6.0.1) contains a coding error that lets a remote user send specially crafted data and overflow the program\u2019s memory. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#comfast #CVE #infosec", "creation_timestamp": "2026-09-20T12:50:04.741882Z"}</description>
      <content:encoded>{"uuid": "58301a27-d194-4bb4-86d9-860e2b920304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvxadcce732w", "content": "CVE-2026-94003 - cf-n1-s\nThe web management page of the Comfast CF-N1-S router (version 2.6.0.1) contains a coding error that lets a remote user send specially crafted data and overflow the program\u2019s memory. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#comfast #CVE #infosec", "creation_timestamp": "2026-09-20T12:50:04.741882Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/58301a27-d194-4bb4-86d9-860e2b920304/export</guid>
      <pubDate>Sun, 20 Sep 2026 12:50:04 +0000</pubDate>
    </item>
    <item>
      <title>ae9328de-1510-4d83-900c-566b80da9ef4</title>
      <link>https://vulnerability.circl.lu/sighting/ae9328de-1510-4d83-900c-566b80da9ef4/export</link>
      <description>{"uuid": "ae9328de-1510-4d83-900c-566b80da9ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94003", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvx5kkeq6p24", "content": "CRITICAL: Comfast CF-N1-S v2.6.0.1 has a stack buffer overflow (CVE-2026-94003). Remote exploitation possible; public exploit disclosed. Restrict access, monitor for anomalies. https://radar.offseq.com/threat/cve-2026-94003-stack-based-buffer-overflow-in-comfast-cf-n1-s-1046130f838f5eec #OffSeq #...", "creation_timestamp": "2026-09-20T12:00:27.775272Z"}</description>
      <content:encoded>{"uuid": "ae9328de-1510-4d83-900c-566b80da9ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94003", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvx5kkeq6p24", "content": "CRITICAL: Comfast CF-N1-S v2.6.0.1 has a stack buffer overflow (CVE-2026-94003). Remote exploitation possible; public exploit disclosed. Restrict access, monitor for anomalies. https://radar.offseq.com/threat/cve-2026-94003-stack-based-buffer-overflow-in-comfast-cf-n1-s-1046130f838f5eec #OffSeq #...", "creation_timestamp": "2026-09-20T12:00:27.775272Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ae9328de-1510-4d83-900c-566b80da9ef4/export</guid>
      <pubDate>Sun, 20 Sep 2026 12:00:27 +0000</pubDate>
    </item>
    <item>
      <title>2c3b9e0b-815a-446d-965c-8d006bd5d2ee</title>
      <link>https://vulnerability.circl.lu/sighting/2c3b9e0b-815a-446d-965c-8d006bd5d2ee/export</link>
      <description>{"uuid": "2c3b9e0b-815a-446d-965c-8d006bd5d2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94003", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117303255016581894", "content": "CVE-2026-94003: CRITICAL stack buffer overflow in Comfast CF-N1-S (2.6.0.1). Flaw in get_css_path_from_uri (/cgi-bin/mbox-config) is remotely exploitable; public exploit exists. Restrict access &amp;amp; monitor closely. https://radar.offseq.com/threat/cve-2026-94003-stack-based-buffer-overflow-in-comfast-cf-n1-s-1046130f838f5eec #OffSeq #Infosec #CVE #IoTSecurity", "creation_timestamp": "2026-09-20T12:00:27.071418Z"}</description>
      <content:encoded>{"uuid": "2c3b9e0b-815a-446d-965c-8d006bd5d2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94003", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117303255016581894", "content": "CVE-2026-94003: CRITICAL stack buffer overflow in Comfast CF-N1-S (2.6.0.1). Flaw in get_css_path_from_uri (/cgi-bin/mbox-config) is remotely exploitable; public exploit exists. Restrict access &amp;amp; monitor closely. https://radar.offseq.com/threat/cve-2026-94003-stack-based-buffer-overflow-in-comfast-cf-n1-s-1046130f838f5eec #OffSeq #Infosec #CVE #IoTSecurity", "creation_timestamp": "2026-09-20T12:00:27.071418Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2c3b9e0b-815a-446d-965c-8d006bd5d2ee/export</guid>
      <pubDate>Sun, 20 Sep 2026 12:00:27 +0000</pubDate>
    </item>
    <item>
      <title>067c2dd7-3c17-4a6e-95a4-cbf6d4b56565</title>
      <link>https://vulnerability.circl.lu/sighting/067c2dd7-3c17-4a6e-95a4-cbf6d4b56565/export</link>
      <description>{"uuid": "067c2dd7-3c17-4a6e-95a4-cbf6d4b56565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117299804045485323", "content": "A new vulnerability with increased severity was disclosed for Comfast CF-N1-S (CVE-2026-94003) https://vuldb.com/vuln/407952", "creation_timestamp": "2026-09-19T21:22:47.465178Z"}</description>
      <content:encoded>{"uuid": "067c2dd7-3c17-4a6e-95a4-cbf6d4b56565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117299804045485323", "content": "A new vulnerability with increased severity was disclosed for Comfast CF-N1-S (CVE-2026-94003) https://vuldb.com/vuln/407952", "creation_timestamp": "2026-09-19T21:22:47.465178Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/067c2dd7-3c17-4a6e-95a4-cbf6d4b56565/export</guid>
      <pubDate>Sat, 19 Sep 2026 21:22:47 +0000</pubDate>
    </item>
  </channel>
</rss>
