Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for CF-WR632AX by Comfast

    CVE-2026-122013 (GCVE-0-2026-122013)

    Vulnerability from nvd – Published: 2026-11-04 20:45 – Updated: 2026-11-04 20:45
    VLAI
    Title
    Comfast CF-WR632AX Multipart webmgnt path traversal
    Summary
    A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality of the file /usr/bin/webmgnt of the component Multipart Parser. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
    Severity
    10 (Critical)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
    10 (Critical)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C
    10 (Critical)
    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C
    CWE
    Assigner
    VulDB CNA under the mitre root
    CNA scorecard B 83/100 over 3828 records in the last 180 days details
    References
    URL Tags
    https://vuldb.com/vuln/431080 vdb-entrytechnical-description
    https://vuldb.com/vuln/431080/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-122013 third-party-advisory
    https://vuldb.com/submit/1023251 third-party-advisory
    https://github.com/FoundTL/COMFAST-CF-WR632AX-Wi-… exploit
    Impacted products
    Vendor Product Version
    Comfast CF-WR632AX Affected: 2.6.0.1
        cpe:2.3:a:comfast:cf-wr632ax:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Credits
    Legion_TL (VulDB User) VulDB CNA Team
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:comfast:cf-wr632ax:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Multipart Parser"
          ],
          "product": "CF-WR632AX",
          "vendor": "Comfast",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.0.1"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Legion_TL (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality of the file /usr/bin/webmgnt of the component Multipart Parser. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 10,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "Path Traversal",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:45:20.840Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-431080 | Comfast CF-WR632AX Multipart webmgnt path traversal",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/431080"
        },
        {
          "name": "VDB-431080 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/431080/cti"
        },
        {
          "name": "CVE-2026-122013 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-122013"
        },
        {
          "name": "Submit #1023251 | COMFAST CF-WR632AX V2 V2.6.0.1 Unauthenticated Path Traversal / Arbitrary File Write",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/1023251"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/FoundTL/COMFAST-CF-WR632AX-Wi-Fi-6-Router"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-11-04T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-11-04T01:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-11-04T15:34:22.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Comfast CF-WR632AX Multipart webmgnt path traversal",
      "x_generator": [
        "VulDB PVTS v202611"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-122013",
    "datePublished": "2026-11-04T20:45:20.840Z",
    "dateReserved": "2026-11-04T14:29:14.402Z",
    "dateUpdated": "2026-11-04T20:45:20.840Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-122013 (GCVE-0-2026-122013)

    Vulnerability from cvelistv5 – Published: 2026-11-04 20:45 – Updated: 2026-11-04 20:45
    VLAI
    Title
    Comfast CF-WR632AX Multipart webmgnt path traversal
    Summary
    A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality of the file /usr/bin/webmgnt of the component Multipart Parser. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
    Severity
    10 (Critical)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
    10 (Critical)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C
    10 (Critical)
    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C
    CWE
    Assigner
    VulDB CNA under the mitre root
    CNA scorecard B 83/100 over 3828 records in the last 180 days details
    References
    URL Tags
    https://vuldb.com/vuln/431080 vdb-entrytechnical-description
    https://vuldb.com/vuln/431080/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-122013 third-party-advisory
    https://vuldb.com/submit/1023251 third-party-advisory
    https://github.com/FoundTL/COMFAST-CF-WR632AX-Wi-… exploit
    Impacted products
    Vendor Product Version
    Comfast CF-WR632AX Affected: 2.6.0.1
        cpe:2.3:a:comfast:cf-wr632ax:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Credits
    Legion_TL (VulDB User) VulDB CNA Team
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:comfast:cf-wr632ax:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Multipart Parser"
          ],
          "product": "CF-WR632AX",
          "vendor": "Comfast",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.0.1"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Legion_TL (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality of the file /usr/bin/webmgnt of the component Multipart Parser. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 10,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "Path Traversal",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:45:20.840Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-431080 | Comfast CF-WR632AX Multipart webmgnt path traversal",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/431080"
        },
        {
          "name": "VDB-431080 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/431080/cti"
        },
        {
          "name": "CVE-2026-122013 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-122013"
        },
        {
          "name": "Submit #1023251 | COMFAST CF-WR632AX V2 V2.6.0.1 Unauthenticated Path Traversal / Arbitrary File Write",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/1023251"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/FoundTL/COMFAST-CF-WR632AX-Wi-Fi-6-Router"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-11-04T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-11-04T01:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-11-04T15:34:22.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Comfast CF-WR632AX Multipart webmgnt path traversal",
      "x_generator": [
        "VulDB PVTS v202611"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-122013",
    "datePublished": "2026-11-04T20:45:20.840Z",
    "dateReserved": "2026-11-04T14:29:14.402Z",
    "dateUpdated": "2026-11-04T20:45:20.840Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}