CVE-2026-5612

HIGH

Belkin F9K1015 formWlEncrypt stack-based overflow

Title source: cna
STIX 2.1

Description

A vulnerability was determined in Belkin F9K1015 1.00.10. This vulnerability affects the function formWlEncrypt of the file /goform/formWlEncrypt. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

Core 4
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-355403 | Belkin F9K1015 formWlEncrypt stack-based overflow
https://vuldb.com/vuln/355403
Signature, Permissions Required signature permissions-required
VDB-355403 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/355403/cti
Third Party Advisory third-party-advisory
Submit #785551 | Belkin F9K1015 1.00.10 Stack-based Buffer Overflow
https://vuldb.com/submit/785551

Scores

CVSS v3 8.8
EPSS 0.0069
EPSS Percentile 47.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-119 CWE-121
Status published
Products (2)
Belkin/F9K1015 1.00.10
belkin/f9k1015_firmware 1.00.10
Published Apr 06, 2026
Tracked Since Apr 06, 2026