CF-WR632AX (2.6.0.1) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/cf-wr632ax-2.6.0.1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 05 Nov 2026 00:05:40 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgComfast CF-WR632AX: Multipart Parser path traversal (CVE-2026-122013)https://feed.craftedsignal.io/briefs/2026-11-path-traversal/Thu, 05 Nov 2026 00:05:40 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-path-traversal/A path traversal vulnerability exists in the Multipart Parser component of the Comfast CF-WR632AX (2.6.0.1) router.<p>A vulnerability has been identified in the Comfast CF-WR632AX firmware version 2.6.0.1. The issue resides in the /usr/bin/webmgnt component's Multipart Parser. By manipulating the 'filename' argument, an attacker can perform path traversal. The attack can be initiated remotely. The exploit is public, and the vendor has not responded to disclosure efforts.</p> criticaladvisory