LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-5608 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: April 7, 2026

Belkin F9K1122 - Buffer Overflow

Published: April 6, 2026Updated: April 7, 2026Remote Exploitable

Overview

Belkin F9K1122 1.00.33 contains a stack-based buffer overflow caused by manipulation of the "webpage" argument in /goform/formWlanSetup, letting remote attackers execute arbitrary code, exploit requires crafted request.

Severity & Score

Severity: High
CVSS Score: 8.8
EPSS Score: 4.1%(Probability of exploitation in next 30 days)

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version or apply vendor patches if available.

Social Media Activity(2 posts)

OffSequence
OffSequence
@offseq
Apr 6, 2026

āš ļø HIGH severity: CVE-2026-5608 in Belkin F9K1122 v1.00.33 enables remote buffer overflow via the /goform/formWlanSetup endpoint. Exploit code is public; no patch from vendor. Restrict remote mgmt access now. https://radar.offseq.com/threat/cve-2026-5608-stack-based-buffer-overflow-in-belki-c4d65888 #OffSeq #Belkin #Vuln

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Apr 6, 2026

🟠 CVE-2026-5608 - High (8.8) A vulnerability was detected in Belkin F9K1122 1.00.33. Affected is the function formWlanSetup of the file /goform/formWlanSetup. The manipulation of the argument webpage results in stack-based buffer overflow. The attack may be performed from rem... šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-5608/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Details

CVE ID
CVE-2026-5608
Severity
High
CVSS Score
8.8
Type
buffer_overflow
Status
unconfirmed
EPSS
4.1%
Social Posts
2

CWE

  • CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

4.1%Probability of exploitation in the next 30 days