CVE-2026-122013: Comfast CF-WR632AX Multipart webmgnt path traversal
A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality of the file /usr/bin/webmgnt of the component Multipart Parser. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Event History
Frequently Asked Questions
Who can exploit this issue?
The attack can be initiated remotely and requires no privileges or user interaction according to the supplied vector. Systems exposing the affected web management functionality to reachable networks are therefore the relevant exposure set.
Is public exploit code available?
Yes. The available information states that the exploit is public and may be used, increasing the likelihood of opportunistic exploitation.
What should teams do if a patch is not available?
The vendor reportedly did not respond to the disclosure, and no fix is identified in the supplied data. Restrict network access to the device's web management interface to trusted administrative networks while evaluating compensating controls or replacement options.
How can I determine whether a device is affected?
Verify whether the device is a Comfast CF-WR632AX running version 2.6.0.1. The reported affected component is the Multipart Parser functionality in /usr/bin/webmgnt.