CVE-2026-5614
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
The Belkin F9K1015 router version 1.00.10 has a stack-based buffer overflow in the formSetPassword function of /goform/formSetPassword. Manipulation of the webpage argument allows remote exploitation. The vendor did not respond.
Risk Assessment
A remote attacker can exploit this vulnerability to take control of the router or change the admin password, leading to full device compromise.
Recommendation
Since the vendor did not respond, consider replacing the router with a supported model or implementing additional security measures such as restricting access to the management interface.
Other vulnerabilities in Belkin
Original NVD description (English source)
A security flaw has been discovered in Belkin F9K1015 1.00.10. Impacted is the function formSetPassword of the file /goform/formSetPassword. The manipulation of the argument webpage results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.