Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality of the file /usr/bin/webmgnt of the component Multipart Parser. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-122013 · CRITICAL · CVSS 10.0 Comfast CF-WR632AX version 2.6.0.1 has a path traversal vulnerability in the Multipart Parser component, allowing remote attackers to manipulate the filename argument. The impact is uncertain. CVSS 2.0 · VulDB https://cve.new/CVE-2026-122013
🆕 New CVE Comfast CF-WR632AX: path traversal in webmgnt multipart parser (CVE-2026-122013) Remote, unauthenticated attackers can reach files outside the intended directory via a crafted filename. No patch listed yet https://cve.now/CVE-2026-122013?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=critical