PT-2026-28750 · Belkin · Belkin F9K1122

Ltzhuster2 + 1 · CVE-2026-5042 · Publicado 2026-03-29 · Atualizado 2026-03-29

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Belkin F9K1122 version 1.00.33

Description A security issue exists in Belkin F9K1122 1.00.33. The issue involves a stack-based buffer overflow in the formCrossBandSwitch function located in the /goform/formCrossBandSwitch file within the Parameter Handler component. The overflow is triggered by manipulating the webpage argument. This allows for potential remote attacks. The exploit for this issue has been publicly released.

Recommendations Belkin F9K1122 version 1.00.33: As a temporary workaround, consider disabling the formCrossBandSwitch function until a patch is available.

Exploit

Correção

Memory Corruption

Buffer Overflow

Stack Overflow

Enumeração de Fraquezas

CWE-787

CWE-119

CWE-121

Identificadores relacionados

CVE-2026-5042

Produtos afetados

Belkin F9K1122

Referências · 9

• 🔥 https://github.com/Litengzheng/vul_db/blob/main/Belkin/vul_153/README.md · Exploit
• https://twitter.com/CveFindCom/status/2038205200310124637 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-5042 · Nota de Segurança
• https://twitter.com/CVEarity/status/2038297051445055524 · Publicação no Twitter
• https://vuldb.com/vuln/353965/cti · Nota
• https://twitter.com/TheHackerWire/status/2038213907794497708 · Publicação no Twitter
• https://vuldb.com/vuln/353965 · Nota
• https://vuldb.com/submit/779123 · Nota
• https://twitter.com/CVEnew/status/2038250162691146203 · Publicação no Twitter