CVE-2020-28592: Cosori CS158-Af Firmware

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

A heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to remote code execution. An attacker can send a malicious packet to trigger this vulnerability.

Affected products

• Cosori CS158-Af Firmware: version 1.1.0 only

Published 2021-04-15. Last modified 2026-06-17.