PT-2026-37047 · Iptime · Nas1Dual

Jfkk · Published 2026-05-05 · Updated 2026-05-15 · CVE-2026-7834

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ipTIME NAS1dual version 1.5.24

Description A stack-based buffer overflow can be triggered remotely via the get csrf whites function within the '/cgi/advanced/misc main.cgi' endpoint. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-119

CWE-121

Related Identifiers

CVE-2026-7834

Affected Products

Nas1Dual

References · 10

• 🔥 https://github.com/glkfc/IoT-Vulnerability/blob/main/iptime/nas1dual/iptime2_en.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7834 · Security Note
• https://twitter.com/vuldb/status/2053976588082126977 · Twitter Post
• https://twitter.com/lyrie_ai/status/2055121274720940412 · Twitter Post
• https://twitter.com/lyrie_ai/status/2055121271281619404 · Twitter Post
• https://twitter.com/lyrie_ai/status/2055121272196014545 · Twitter Post
• https://twitter.com/lyrie_ai/status/2055121270728020235 · Twitter Post
• https://vuldb.com/vuln/361113 · Note
• https://vuldb.com/submit/807787 · Note
• https://vuldb.com/vuln/361113/cti · Note