PT-2026-28750 · Belkin · Belkin F9K1122

Ltzhuster2 + 1 · Published 2026-03-29 · Updated 2026-03-29 · CVE-2026-5042

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Belkin F9K1122 version 1.00.33

Description A security issue exists in Belkin F9K1122 1.00.33. The issue involves a stack-based buffer overflow in the formCrossBandSwitch function located in the /goform/formCrossBandSwitch file within the Parameter Handler component. The overflow is triggered by manipulating the webpage argument. This allows for potential remote attacks. The exploit for this issue has been publicly released.

Recommendations Belkin F9K1122 version 1.00.33: As a temporary workaround, consider disabling the formCrossBandSwitch function until a patch is available.

Exploit

Fix

Memory Corruption

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-787

CWE-119

CWE-121

Related Identifiers

CVE-2026-5042

Affected Products

Belkin F9K1122

References · 9

• 🔥 https://github.com/Litengzheng/vul_db/blob/main/Belkin/vul_153/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5042 · Security Note
• https://twitter.com/CveFindCom/status/2038205200310124637 · Twitter Post
• https://twitter.com/CVEarity/status/2038297051445055524 · Twitter Post
• https://vuldb.com/vuln/353965/cti · Note
• https://twitter.com/TheHackerWire/status/2038213907794497708 · Twitter Post
• https://vuldb.com/vuln/353965 · Note
• https://vuldb.com/submit/779123 · Note
• https://twitter.com/CVEnew/status/2038250162691146203 · Twitter Post