CVE-2026-5614: high-severity vulnerability in Belkin F9K1015
Belkin F9K1015 formSetPassword stack-based overflow
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.7epss 0.9%
A security flaw has been discovered in Belkin F9K1015 1.00.10. Impacted is the function formSetPassword of the file /goform/formSetPassword. The manipulation of the argument webpage results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Belkin · F9K1015public PoCs found — 1
cve_referencegithub.com/Litengzheng/vuldb_new/blob/main/Belkin%20F9K1015/vul_11/README.mdunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Belkin F9K1015
In the same product, most dangerous first.
CVE-2025-11303MEDIUMBelkin F9K1015 mp command injectionEPSS 6.8%CVE-2025-11298MEDIUMBelkin F9K1015 formSetWanStatic command injectionEPSS 6.8%CVE-2025-11292MEDIUMBelkin F9K1015 formBSSetSitesurvey command injectionEPSS 6.8%CVE-2025-11294HIGHBelkin F9K1015 formL2TPSetup buffer overflowEPSS 1.3%CVE-2025-11299HIGHBelkin F9K1015 formWanTcpipSetup buffer overflowEPSS 1.1%CVE-2025-11296HIGHBelkin F9K1015 formPPTPSetup buffer overflowEPSS 1.1%