PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-5628 Belkin CVE debrief

A stack-based buffer overflow vulnerability has been detected in Belkin F9K1015 1.00.10. The impacted function is formSetSystemSettings, located in the file /goform/formSetSystemSettings of the Setting Handler component. The manipulation of the argument webpage leads to the vulnerability. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor, Belkin, was contacted early about this disclosure but did not respond.

Vendor
Belkin
Product
F9K1015
CVSS
HIGH 7.4
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-06
Original CVE updated
2026-07-24
Advisory published
2026-04-06
Advisory updated
2026-07-24

Who should care

Security teams responsible for managing Belkin F9K1015 devices, particularly those using firmware version 1.00.10, should be aware of this vulnerability. Given the HIGH CVSS score of 7.4, this issue should be prioritized for patching or mitigation.

Technical summary

The CVE-2026-5628 vulnerability is a stack-based buffer overflow in the formSetSystemSettings function of the Belkin F9K1015 device. This function is part of the Setting Handler component and is accessible via the /goform/formSetSystemSettings file. The vulnerability is triggered by manipulating the webpage argument, which allows for remote exploitation. The CVSS:4.0 vector is AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X, indicating a High severity score of 7.4.

Defensive priority

High

Recommended defensive actions

  • Inventory and assess Belkin F9K1015 devices for version 1.00.10
  • Apply vendor patches or updates if available
  • Implement network access controls to limit interaction with the device
  • Monitor for suspicious activity related to the Setting Handler component
  • Consider replacing or upgrading affected devices if patches are not available

Evidence notes

The CVE record was published on 2026-04-06T06:16:22.087Z and was last modified on 2026-07-24T09:10:00.153Z. The NVD entry is currently Analyzed. The vulnerability details are based on information from official sources, including the CVE.org record and the NVD detail page.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-04-06T06:16:22.087Z and has not been modified since then. The NVD entry is currently Analyzed.