Belkin F9K1015 vulnerabilities
14 known CVE vulnerabilities in Belkin F9K1015, translated and rated.
- CVE-2025-11303Medium
A vulnerability was detected in Belkin F9K1015 1.00.10, involving command injection in /goform/mp. Manipulation of the command argument allows remote command execution. The exploit is public and may be used.
- CVE-2025-11298Medium
A vulnerability was determined in Belkin F9K1015 1.00.10, involving command injection in /goform/formSetWanStatic. Manipulation of m_wan_ipaddr allows remote command execution. The exploit is publicly disclosed.
- CVE-2025-11292Medium
A weakness was identified in Belkin F9K1015 1.00.10, involving command injection in /goform/formBSSetSitesurvey. Manipulation of wan_ipaddr allows remote command execution. The exploit is publicly available.
- CVE-2026-5628High
A security vulnerability has been detected in Belkin F9K1015 1.00.10. This vulnerability affects the function formSetSystemSettings in the file /goform/formSetSystemSettings, where manipulation of the webpage argument leads to a stack-based buffer overflow. Remote exploitation is possible, and the exploit has been publicly disclosed. The vendor did not respond.
- CVE-2026-5613High
A stack-based buffer overflow vulnerability was identified in the Belkin F9K1015 router version 1.00.10 in the formReboot function of the /goform/formReboot file. The attack can be performed remotely by manipulating the webpage argument. The exploit is publicly available.
- CVE-2026-5612High
A stack-based buffer overflow vulnerability was found in the Belkin F9K1015 router version 1.00.10 in the formWlEncrypt function of the /goform/formWlEncrypt file. The attack can be performed remotely by manipulating the webpage argument. The exploit has been publicly disclosed.
- CVE-2026-5611High
A stack-based buffer overflow vulnerability was identified in the Belkin F9K1015 router version 1.00.10 in the formCrossBandSwitch function of the /goform/formCrossBandSwitch file. The attack can be performed remotely by manipulating the webpage argument. The exploit has been made public.
- CVE-2026-5610High
A stack-based buffer overflow vulnerability was found in the Belkin F9K1015 router version 1.00.10 in the formWISP5G function of the /goform/formWISP5G file. The attack can be performed remotely by manipulating the webpage argument. The exploit has been publicly disclosed.
- CVE-2025-11302High
A security vulnerability has been detected in Belkin F9K1015 1.00.10. This impacts an unknown function in /goform/formWpsStart, where manipulation of the pinCode argument leads to buffer overflow. The attack can be launched remotely, and the exploit has been disclosed publicly.
- CVE-2025-11299High
A vulnerability was identified in Belkin F9K1015 1.00.10. The affected element is an unknown function in /goform/formWanTcpipSetup, where manipulation of the pppUserName argument leads to buffer overflow. The attack can be launched remotely, and the exploit is publicly available.
- CVE-2025-11296High
A vulnerability has been found in Belkin F9K1015 1.00.10. This vulnerability affects unknown code in /goform/formPPTPSetup, where manipulation of the pptpUserName argument leads to buffer overflow. The attack can be executed remotely, and the exploit has been disclosed publicly.
- CVE-2025-11295High
A flaw has been found in Belkin F9K1015 1.00.10. This affects an unknown part of /goform/formPPPoESetup, where manipulation of the pppUserName argument causes buffer overflow. Remote exploitation is possible, and the exploit has been published.
- CVE-2025-11294High
A vulnerability was detected in Belkin F9K1015 1.00.10. The issue affects an unknown function in /goform/formL2TPSetup, where manipulation of the L2TPUserName argument leads to buffer overflow. The attack can be launched remotely, and the exploit is publicly available.
- CVE-2025-11293High
A security vulnerability has been detected in Belkin F9K1015 1.00.10. Affected by this vulnerability is an unknown functionality in /goform/formConnectionSetting, where manipulation of the max_Conn argument leads to buffer overflow. The attack may be initiated remotely, and the exploit has been disclosed publicly.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

