PatchSiren cyber security CVE debrief

CVE-2026-5628 Belkin CVE debrief

A stack-based buffer overflow vulnerability has been detected in Belkin F9K1015 1.00.10. The impacted function is formSetSystemSettings, located in the file /goform/formSetSystemSettings of the Setting Handler component. The manipulation of the argument webpage leads to the vulnerability. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor, Belkin, was contacted early about this disclosure but did not respond.

Vendor: Belkin
Product: F9K1015
CVSS: HIGH 7.4
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-04-06
Original CVE updated: 2026-07-24
Advisory published: 2026-04-06
Advisory updated: 2026-07-24

Who should care

Security teams responsible for managing Belkin F9K1015 devices, particularly those using firmware version 1.00.10, should be aware of this vulnerability. Given the HIGH CVSS score of 7.4, this issue should be prioritized for patching or mitigation.

Technical summary

The CVE-2026-5628 vulnerability is a stack-based buffer overflow in the formSetSystemSettings function of the Belkin F9K1015 device. This function is part of the Setting Handler component and is accessible via the /goform/formSetSystemSettings file. The vulnerability is triggered by manipulating the webpage argument, which allows for remote exploitation. The CVSS:4.0 vector is AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X, indicating a High severity score of 7.4.

Defensive priority

High

Recommended defensive actions

Inventory and assess Belkin F9K1015 devices for version 1.00.10
Apply vendor patches or updates if available
Implement network access controls to limit interaction with the device
Monitor for suspicious activity related to the Setting Handler component
Consider replacing or upgrading affected devices if patches are not available

Evidence notes

The CVE record was published on 2026-04-06T06:16:22.087Z and was last modified on 2026-07-24T09:10:00.153Z. The NVD entry is currently Analyzed. The vulnerability details are based on information from official sources, including the CVE.org record and the NVD detail page.

Sources and references

Verified primary and authoritative sources

CVE-2026-5628 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-5628

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-5628 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-5628

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Mitigation or vendor reference
Unverified legacy reference

URL: https://github.com/Litengzheng/vuldb_new/blob/main/Belkin%20F9K1015/vul_12/README.md

[email protected] - Exploit, Third Party Advisory
Mitigation or vendor reference
Unverified legacy reference

URL: https://vuldb.com/submit/785555

[email protected] - Third Party Advisory, VDB Entry
Mitigation or vendor reference
Unverified legacy reference

URL: https://vuldb.com/vuln/355416

[email protected] - Third Party Advisory, VDB Entry
Source reference
Unverified legacy reference

URL: https://vuldb.com/vuln/355416/cti

[email protected] - Permissions Required, VDB Entry

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.