{"vulnerability": "cve-2026-94003", "sightings": [{"uuid": "067c2dd7-3c17-4a6e-95a4-cbf6d4b56565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117299804045485323", "content": "A new vulnerability with increased severity was disclosed for Comfast CF-N1-S (CVE-2026-94003) https://vuldb.com/vuln/407952", "creation_timestamp": "2026-09-19T21:22:47.465178Z"}, {"uuid": "2c3b9e0b-815a-446d-965c-8d006bd5d2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94003", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117303255016581894", "content": "CVE-2026-94003: CRITICAL stack buffer overflow in Comfast CF-N1-S (2.6.0.1). Flaw in get_css_path_from_uri (/cgi-bin/mbox-config) is remotely exploitable; public exploit exists. Restrict access & monitor closely. https://radar.offseq.com/threat/cve-2026-94003-stack-based-buffer-overflow-in-comfast-cf-n1-s-1046130f838f5eec #OffSeq #Infosec #CVE #IoTSecurity", "creation_timestamp": "2026-09-20T12:00:27.071418Z"}, {"uuid": "ae9328de-1510-4d83-900c-566b80da9ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94003", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvx5kkeq6p24", "content": "CRITICAL: Comfast CF-N1-S v2.6.0.1 has a stack buffer overflow (CVE-2026-94003). Remote exploitation possible; public exploit disclosed. Restrict access, monitor for anomalies. https://radar.offseq.com/threat/cve-2026-94003-stack-based-buffer-overflow-in-comfast-cf-n1-s-1046130f838f5eec #OffSeq #...", "creation_timestamp": "2026-09-20T12:00:27.775272Z"}, {"uuid": "58301a27-d194-4bb4-86d9-860e2b920304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvxadcce732w", "content": "CVE-2026-94003 - cf-n1-s\nThe web management page of the Comfast CF-N1-S router (version 2.6.0.1) contains a coding error that lets a remote user send specially crafted data and overflow the program\u2019s memory. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#comfast #CVE #infosec", "creation_timestamp": "2026-09-20T12:50:04.741882Z"}, {"uuid": "5844c3d0-9bf0-42b1-9eb5-bd8adbc6268a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvxemzozox2g", "content": "\ud83d\udea8 CVE-2026-94003 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri o...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94003\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-20T14:07:06.583675Z"}, {"uuid": "5d9079ca-800b-47e9-a976-950e157eec2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvxen2e3jt2d", "content": "\ud83d\udea8 CVE-2026-94003 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri o...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94003\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-20T14:07:07.288456Z"}, {"uuid": "9a598e9d-4750-45de-aa58-c33d79d58d2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxhsgk4kk2r", "content": "\ud83d\udd34 CVE-2026-94003 - Critical (10)\n\nA vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94003/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T15:03:49.686479Z"}, {"uuid": "34cfedc3-bd9a-4a04-bb61-146741828254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94003", "type": "seen", "source": "https://gist.github.com/ichintu/cfeb694d6cc595f396c823c83adfb7c0", "content": "CVE-2026-94003 is a critical (CVSS 10.0) remote stack-based buffer overflow vulnerability in the web management interface of the Comfast CF-N1-S router (v2.6.0.1). Located in the `get_css_path_from_uri` function, the flaw is actively exploitable and was publicly disclosed on September 20, 2026.", "creation_timestamp": "2026-09-20T16:01:22.045133Z"}]}