CVE-2026-122013 — Comfast Cf-Wr632ax
CRITICALCVE-2026-122013 is a critical-severity (CVSS 10) Path Traversal vulnerability in comfast cf-wr632ax. The records list no fixed version yet; check the vendor advisory below and apply the mitigations in the meantime.
A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality of the file /usr/bin/webmgnt of the component Multipart Parser.…
Description
A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality of the file /usr/bin/webmgnt of the component Multipart Parser. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Products
cf-wr632axcomfastDetection & mitigation playbook
Vendor / applianceDetect
Inventory every comfast cf-wr632ax deployment and check each version against the affected-products list above.
Remediation status
The records we use list no fixed version for CVE-2026-122013. Check the comfast cf-wr632ax advisory for a patched release, and apply the workarounds below until you can upgrade.
Mitigate without a patch
Resolve every user-supplied path to its canonical form and reject anything that escapes the intended directory, and run the component under an account that has no read or write access outside the directory it legitimately serves. Alongside that, restrict the management interface to trusted networks and apply the vendor's recommended configuration mitigations.
Frequently Asked Questions
Is CVE-2026-122013 being exploited in your environment?
Detect and block the exploit chain at execution, on systems you cannot patch yet.