{"vulnerability": "cve-2026-7600", "sightings": [{"uuid": "80c783ea-8a55-4fde-a179-e7ccc46c6713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76008", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117119937763757185", "content": "Comfast CF-N1-S v2.6.0.1 hit by CRITICAL CVE-2026-76008: stack-based buffer overflow in /cgi-bin/mbox-config (get_para_from_uri). Remote exploitation risk; mitigation unavailable. Monitor for patches. #OffSeq #CVE202676008 #IoTSecurity https://radar.offseq.com/threat/cve-2026-76008-stack-based-buffer-overflow-in-comfast-cf-n1-s-3ceda49f6d8d37d6", "creation_timestamp": "2026-08-19T03:00:26.464827Z"}, {"uuid": "95118647-ca1e-498d-b8f5-d75bf55caddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76008", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtfqhj7tju27", "content": "Comfast CF-N1-S 2.6.0.1 suffers CRITICAL stack buffer overflow (CVE-2026-76008). Remote attack possible via /cgi-bin/mbox-config. No patch yet \u2014 restrict access & monitor for fixes. #OffSeq #CVE202676008 https://radar.offseq.com/threat/cve-2026-76008-stack-based-buffer-overflow-in-comfast-cf-n1-s...", "creation_timestamp": "2026-08-19T03:00:28.954992Z"}, {"uuid": "053c72ce-00ca-48ee-93d9-6964fc71edb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76008", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfttvhke72b", "content": "\ud83d\udd34 CVE-2026-76008 - Critical (10)\n\nA flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_uri of ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76008/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T04:01:05.866330Z"}, {"uuid": "5e7bae95-9ab2-422b-94a8-b35061699af9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76003", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtftu4yaco2m", "content": "\ud83d\udd34 CVE-2026-76003 - Critical (9.9)\n\nA weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function s...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76003/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T04:01:13.387297Z"}, {"uuid": "5b5ba5ca-86ac-4eba-98c1-b87bfb512818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76004", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtftudw2qa2z", "content": "\ud83d\udd34 CVE-2026-76004 - Critical (9.9)\n\nA security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affecte...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76004/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T04:01:20.140643Z"}, {"uuid": "d8c8fc9a-1962-4233-a6a1-5fc24893d6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76004", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6nty3mit5tdmx", "content": "CVE-2026-76004 - UTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflow\nCVE ID : CVE-2026-76004\n \n Published : Aug. 19, 2026, 3:16 a.m. | 32\u00a0minutes ago\n \n Description : A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. A...", "creation_timestamp": "2026-08-19T04:02:00.069234Z"}, {"uuid": "cf3fb44a-b432-48e2-a816-ee3d3a1698ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76008", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfu75v3ic2m", "content": "\ud83d\udea8 CVE-2026-76008 \u2014 CVSS 10 CRITICAL\n\nA flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_uri of the file /...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76008\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T04:07:22.447662Z"}, {"uuid": "f08c5d87-34cb-4d72-bf32-bbecc4d8d698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76003", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jji6323jd3jna", "content": "CVE-2026-76003 - UTT HiPER 1200GW formGroupConfig strcpy stack-based overflow\nCVE ID : CVE-2026-76003\n \n Published : Aug. 19, 2026, 3:16 a.m. | 32\u00a0minutes ago\n \n Description : A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcp...", "creation_timestamp": "2026-08-19T04:08:00.356525Z"}, {"uuid": "562e4cb7-427c-4247-a090-d737587f8f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76008", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6ptfoj2tbjjht", "content": "CVE-2026-76008 - Comfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflow\nCVE ID : CVE-2026-76008\n \n Published : Aug. 19, 2026, 3:16 a.m. | 32\u00a0minutes ago\n \n Description : A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the functi...", "creation_timestamp": "2026-08-19T04:10:00.499734Z"}, {"uuid": "15b25e73-f4db-425c-bc29-c26e373dadf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76004", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117120291598213539", "content": "UTT HiPER 1250GW v3.2.7-210907-180535 hit by CRITICAL stack-based buffer overflow (CVE-2026-76004) in HTTP handler. Exploitable via 'pvid' arg. No patch yet \u2014 restrict remote access & monitor traffic. https://radar.offseq.com/threat/cve-2026-76004-stack-based-buffer-overflow-in-utt-hiper-1250gw-976b1783bc5dbe2e #OffSeq #CVE202676004 #Vuln #Infosec", "creation_timestamp": "2026-08-19T04:30:25.116433Z"}, {"uuid": "450cc067-41df-4c61-bb14-7e526eb138c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76004", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtfvig7y6o2c", "content": "CRITICAL buffer overflow (CVE-2026-76004) in UTT HiPER 1250GW v3.2.7-210907-180535. No patch \u2014 restrict remote HTTP access & monitor for suspicious 'pvid' traffic. Details: https://radar.offseq.com/threat/cve-2026-76004-stack-based-buffer-overflow-in-utt-hiper-1250gw-976b1783bc5dbe2e #OffSeq #CVE...", "creation_timestamp": "2026-08-19T04:30:26.994529Z"}, {"uuid": "ed4888ce-5574-4960-acbd-4843d4bac095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76008", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtfxuh3xr42j", "content": "Daily IT Security Digest \u2014 2026-08-19\nTRENDnet TEW-823DRU (CVSS 9.4, RCE via `/cgi-bin/wan.cgi`) and **CVE-2026-76008** on Comfast CF-N1-S v2.6.0.1 (CVSS 10, stack-based overflow in `get_para_from_uri`). Both enable remote code execution on widely-deployed consumer/enterprise networking gear.", "creation_timestamp": "2026-08-19T05:13:00.174117Z"}, {"uuid": "f987c12c-4ee1-4e84-83b2-d814c3742c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76003", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117120645700764366", "content": "CVE-2026-76003 (CRITICAL): Stack-based buffer overflow in UTT HiPER 1200GW (2.5.3-170306). Remote code execution possible via timestart argument; public exploit exists. No patch yet. Restrict access & monitor. https://radar.offseq.com/threat/cve-2026-76003-stack-based-buffer-overflow-in-utt-hiper-1200gw-f42b168f89ef1ec7 #OffSeq #CVE202676003 #infosec #vuln", "creation_timestamp": "2026-08-19T06:00:32.813450Z"}, {"uuid": "d4969e4e-0d81-4dae-a5a9-cdaa1c2f2439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76003", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtg2jh5t4z2e", "content": "UTT HiPER 1200GW v2.5.3-170306 faces a CRITICAL stack buffer overflow (CVE-2026-76003). Exploit code is public \u2014 no patch yet. Restrict access & monitor for attacks. https://radar.offseq.com/threat/cve-2026-76003-stack-based-buffer-overflow-in-utt-hiper-1200gw-f42b168f89ef1ec7 #OffSeq #CVE2026760...", "creation_timestamp": "2026-08-19T06:00:30.899920Z"}, {"uuid": "8f24c38f-05c6-487e-a822-94b1d361178e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76008", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtgk5eacfy2e", "content": "CVE-2026-76008 - cf-n1-s\nA security issue has been discovered in the Comfast CF-N1-S 2.6.0.1. This affects the way it handles certain image files. An attacker can potentially send a malicious image to the device,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#comfast #CVE #infosec", "creation_timestamp": "2026-08-19T10:40:04.265315Z"}, {"uuid": "a528f2d2-73cf-4e07-a657-ae63ade7deeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76009", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117239554096140693", "content": "CVE-2026-76009 (HIGH): Next-Cart Store to WooCommerce Migration \u22643.9.8 exposes an auth bypass via REST API. Attackers can execute arbitrary SQL & delete files \u2014 full site compromise possible. Patch status unknown. Details: https://radar.offseq.com/threat/cve-2026-76009-cwe-287-improper-authentication-in-martinnguyen1990-next-cart-store-to-woocommerce-e35aad4a96ee528d #OffSeq #WordPress #Vuln #Infosec", "creation_timestamp": "2026-09-09T06:00:26.725303Z"}, {"uuid": "50c9f2ee-3fb0-4a6f-ab84-b457429b79e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76009", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv2ucq2csq2h", "content": "Next-Cart Store to WooCommerce Migration plugin (\u22643.9.8) hit by HIGH severity auth bypass \u2014 enables unauthenticated SQL execution & admin account creation. Check vendor guidance & monitor for patches. https://radar.offseq.com/threat/cve-2026-76009-cwe-287-improper-authentication-in-martinnguyen19...", "creation_timestamp": "2026-09-09T06:00:28.471008Z"}, {"uuid": "bc2cf7f3-3ec6-4bdb-adf0-71274d11a9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6frwvztmdadfn", "content": "CVE-2026-76009 - Next-Cart Store to WooCommerce Migration\nCVE ID : CVE-2026-76009\n \n Published : 9. September 2026 06:17 | 42\u00a0Minuten ago\n \n Description : The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions u...", "creation_timestamp": "2026-09-09T07:05:49.979480Z"}, {"uuid": "eec6e37c-3479-49ad-a956-666a3286eb63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76009", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv36hko4jm2m", "content": "\ud83d\udfe0 CVE-2026-76009 - High (8.1)\n\nThe Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76009/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T09:02:08.391074Z"}]}