A stack-based buffer overflow vulnerability (CVE-2026-7834) has been discovered in EFM ipTIME NAS1dual version 1.5.24. The vulnerability affects the get_csrf_whites function in /cgi/advanced/misc_main.cgi file and can be exploited remotely. Public exploits are available for this vulnerability. The vendor was notified but has not responded to the disclosure. This represents a high-severity security risk for affected NAS devices.