PT-2026-30556 · Belkin · Belkin F9K1015

Ltzhust · Published 2026-04-05 · Updated 2026-04-06 · CVE-2026-5611

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Belkin F9K1015 version 1.00.10

Description A stack-based buffer overflow exists in the formCrossBandSwitch function of the /goform/formCrossBandSwitch file. Manipulation of the webpage argument can trigger this issue, allowing for remote exploitation. The exploit has been made public.

Recommendations Replace the affected device with a newer, non-vulnerable version.

Exploit

Fix

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-119

CWE-121

Related Identifiers

BDU:2026-05020

CVE-2026-5611

Affected Products

Belkin F9K1015

References · 11

• 🔥 https://github.com/Litengzheng/vuldb_new/blob/main/Belkin%20F9K1015/vul_5/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5611 · Security Note
• https://bdu.fstec.ru/vul/2026-05020 · Security Note
• https://vuldb.com/vuln/355402/cti · Note
• https://twitter.com/DFIR_Lab/status/2040994297432920288 · Twitter Post
• https://vuldb.com/vuln/355402 · Note
• https://twitter.com/CveFindCom/status/2040998623291347266 · Twitter Post
• https://twitter.com/TheHackerWire/status/2041002885090304191 · Twitter Post
• https://vuldb.com/submit/785538 · Note
• https://twitter.com/infoflowcloud/status/2040999518053728546 · Twitter Post
• https://twitter.com/CVEnew/status/2040998351756472360 · Twitter Post