CVE-2026-5612
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
A stack-based buffer overflow vulnerability was found in the Belkin F9K1015 router version 1.00.10 in the formWlEncrypt function of the /goform/formWlEncrypt file. The attack can be performed remotely by manipulating the webpage argument. The exploit has been publicly disclosed.
Risk Assessment
A remote attack could allow arbitrary code execution on the router, potentially leading to full compromise of the device and network.
Recommendation
Immediately disconnect the device from the network and replace it with a supported model, as the vendor did not respond to the disclosure.
Other vulnerabilities in Belkin F9K1015
See all- CVE-2026-5628High
A security vulnerability has been detected in Belkin F9K1015 1.00.10. This vulnerability affects the function formSetSystemSettings in the file /goform/formSetSystemSettings, where manipulation of the webpage argument leads to a stack-based buffer overflow. Remote exploitation is possible, and the exploit has been publicly disclosed. The vendor did not respond.
- CVE-2026-5613High
A stack-based buffer overflow vulnerability was identified in the Belkin F9K1015 router version 1.00.10 in the formReboot function of the /goform/formReboot file. The attack can be performed remotely by manipulating the webpage argument. The exploit is publicly available.
- CVE-2026-5611High
A stack-based buffer overflow vulnerability was identified in the Belkin F9K1015 router version 1.00.10 in the formCrossBandSwitch function of the /goform/formCrossBandSwitch file. The attack can be performed remotely by manipulating the webpage argument. The exploit has been made public.
- CVE-2026-5610High
A stack-based buffer overflow vulnerability was found in the Belkin F9K1015 router version 1.00.10 in the formWISP5G function of the /goform/formWISP5G file. The attack can be performed remotely by manipulating the webpage argument. The exploit has been publicly disclosed.
Original NVD description (English source)
A vulnerability was determined in Belkin F9K1015 1.00.10. This vulnerability affects the function formWlEncrypt of the file /goform/formWlEncrypt. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.