# CVE-2026-122013: Comfast CF-WR632AX path traversal in multipart parser

Source: https://junglewise.ai/threats/cve-2026-122013-a-vulnerability-was-detected-in-comfast-cf-wr632ax-2-6-0-1  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-04. Updated: 2026-11-04  
License: CC BY 4.0 with a link back

CVE-2026-122013 · Severity: critical · CVSS 10 · Published 2026-11-04

The Comfast CF-WR632AX is a Wi-Fi 6 router used for home and business network connectivity. A path traversal vulnerability in the router's web management interface allows an attacker to manipulate file paths and write or read arbitrary files on the device by sending specially crafted requests. An attacker can exploit this remotely without authentication to take full control of the router or steal sensitive configuration data.

Vendors: [Comfast](https://junglewise.ai/threats/vendors/comfast).

## Quick answers

**Is CVE-2026-122013 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-122013 being exploited in the wild.

**How severe is CVE-2026-122013?** Critical severity, with a CVSS score of 10, published 4 November 2026.

**Which products and versions are affected?** Comfast CF-WR632AX 2.6.0.1.

**Is there a fix for CVE-2026-122013?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-122013 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-122013?** Check whether you run Comfast CF-WR632AX at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A path traversal vulnerability exists in the multipart parser component of /usr/bin/webmgnt in Comfast CF-WR632AX 2.6.0.1. The vulnerability is triggered by manipulating the filename argument, allowing directory traversal sequences to bypass path restrictions. The attack is remotely exploitable without authentication and enables arbitrary file write operations.

## Affected products

- Comfast CF-WR632AX 2.6.0.1

## Timeline

- 2026-11-04: disclosed

## References

- [https://github.com/FoundTL/COMFAST-CF-WR632AX-Wi-Fi-6-Router](https://github.com/FoundTL/COMFAST-CF-WR632AX-Wi-Fi-6-Router)
- [https://vuldb.com/cve/CVE-2026-122013](https://vuldb.com/cve/CVE-2026-122013)