by Kastro
Paper/Archive/CVE-2026-122013

CVE-2026-122013

Comfast CF-WR632AX — Comfast CF-WR632AX Multipart webmgnt path traversal

CVSS 10.0
critical.is priorityof 100
30
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality of the file /usr/bin/webmgnt of the component Multipart Parser. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected

ProductAffectedFixed inSource
CF-WR632AX2.6.0.1–CNA

Scores by source

VulDB (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
VulDB (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C
VulDB (CNA)10.0CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C

References

writeupvuldb.com/vuln/431080refvuldb.com/vuln/431080/ctiwriteupvuldb.com/cve/CVE-2026-122013writeupvuldb.com/submit/1023251exploitgithub.com/FoundTL/COMFAST-CF-WR632AX-Wi-Fi-6-Router