{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3hcomfastcf-wr632ax2.6.0.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:h:comfast:cf-wr632ax:2.6.0.1:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":10,"id":"CVE-2026-122013"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CVE-2026-122013\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["CF-WR632AX (2.6.0.1)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Comfast"],"content_html":"\u003cp\u003eA vulnerability has been identified in the Comfast CF-WR632AX firmware version 2.6.0.1. The issue resides in the /usr/bin/webmgnt component's Multipart Parser. By manipulating the 'filename' argument, an attacker can perform path traversal. The attack can be initiated remotely. The exploit is public, and the vendor has not responded to disclosure efforts.\u003c/p\u003e\n","date_modified":"2026-11-05T00:21:16Z","date_published":"2026-11-05T00:05:40Z","id":"https://feed.craftedsignal.io/briefs/2026-11-path-traversal/","summary":"A path traversal vulnerability exists in the Multipart Parser component of the Comfast CF-WR632AX (2.6.0.1) router.","title":"Comfast CF-WR632AX: Multipart Parser path traversal (CVE-2026-122013)","url":"https://feed.craftedsignal.io/briefs/2026-11-path-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:h:comfast:cf-Wr632ax:2.6.0.1:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}