CVE-2026-5610
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
A stack-based buffer overflow vulnerability was found in the Belkin F9K1015 router version 1.00.10 in the formWISP5G function of the /goform/formWISP5G file. The attack can be performed remotely by manipulating the webpage argument. The exploit has been publicly disclosed.
Risk Assessment
A remote attack could allow arbitrary code execution on the router, potentially leading to full compromise of the device and network.
Recommendation
Immediately disconnect the device from the network and replace it with a supported model, as the vendor did not respond to the disclosure.
Other vulnerabilities in Belkin F9K1015
See all- CVE-2026-5628High
A security vulnerability has been detected in Belkin F9K1015 1.00.10. This vulnerability affects the function formSetSystemSettings in the file /goform/formSetSystemSettings, where manipulation of the webpage argument leads to a stack-based buffer overflow. Remote exploitation is possible, and the exploit has been publicly disclosed. The vendor did not respond.
- CVE-2026-5613High
A stack-based buffer overflow vulnerability was identified in the Belkin F9K1015 router version 1.00.10 in the formReboot function of the /goform/formReboot file. The attack can be performed remotely by manipulating the webpage argument. The exploit is publicly available.
- CVE-2026-5612High
A stack-based buffer overflow vulnerability was found in the Belkin F9K1015 router version 1.00.10 in the formWlEncrypt function of the /goform/formWlEncrypt file. The attack can be performed remotely by manipulating the webpage argument. The exploit has been publicly disclosed.
- CVE-2026-5611High
A stack-based buffer overflow vulnerability was identified in the Belkin F9K1015 router version 1.00.10 in the formCrossBandSwitch function of the /goform/formCrossBandSwitch file. The attack can be performed remotely by manipulating the webpage argument. The exploit has been made public.
Original NVD description (English source)
A vulnerability has been found in Belkin F9K1015 1.00.10. Affected by this issue is the function formWISP5G of the file /goform/formWISP5G. Such manipulation of the argument webpage leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.