Home / Vulnerability Intelligence / CVE-2026-5042

CVE-2026-5042 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 30, 2026

Belkin F9K1122 - Buffer Overflow

Published: March 29, 2026Updated: March 30, 2026PoC AvailableRemote Exploitable

Overview

Belkin F9K1122 1.00.33 contains a stack-based buffer overflow caused by manipulation of the "webpage" argument in /goform/formCrossBandSwitch Parameter Handler, letting remote attackers execute arbitrary code, exploit requires crafted request.

Severity & Score

Severity: High

CVSS Score: 8.8

EPSS Score: 8.3%(Probability of exploitation in next 30 days)

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version or apply vendor patches when available.

References

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 29, 2026

🟠 CVE-2026-5042 - High (8.8) A security flaw has been discovered in Belkin F9K1122 1.00.33. The affected element is the function formCrossBandSwitch of the file /goform/formCrossBandSwitch of the component Parameter Handler. The manipulation of the argument webpage results in... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5042/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID: CVE-2026-5042
Severity: High
CVSS Score: 8.8
Type: buffer_overflow
Status: confirmed
EPSS: 8.3%
Social Posts: 1

CWE

CWE-119
CWE-787

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

8.3%Probability of exploitation in the next 30 days