LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-5629 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: April 7, 2026

Belkin F9K1015 - Buffer Overflow

Published: April 6, 2026Updated: April 7, 2026Remote Exploitable

Overview

Belkin F9K1015 1.00.10 contains a stack-based buffer overflow caused by manipulation of the "webpage" argument in /goform/formSetFirewall, letting remote attackers execute arbitrary code, exploit requires crafted request.

Severity & Score

Severity: High
CVSS Score: 8.8
EPSS Score: 4.1%(Probability of exploitation in next 30 days)

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version provided by the vendor.

Social Media Activity(2 posts)

OffSequence
OffSequence
@offseq
Apr 6, 2026

⚠️ CVE-2026-5629: High-severity stack buffer overflow in Belkin F9K1015 (v1.00.10). Remote exploit possible — public code out, no patch yet. Restrict device access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-5629-stack-based-buffer-overflow-in-belki-abbd3417 #OffSeq #Vulnerability #RouterSecurity #Belkin

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Apr 6, 2026

🟠 CVE-2026-5629 - High (8.8) A vulnerability was detected in Belkin F9K1015 1.00.10. The affected element is the function formSetFirewall of the file /goform/formSetFirewall. The manipulation of the argument webpage results in stack-based buffer overflow. The attack can be ex... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5629/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Details

CVE ID
CVE-2026-5629
Severity
High
CVSS Score
8.8
Type
buffer_overflow
Status
unconfirmed
EPSS
4.1%
Social Posts
2

CWE

  • CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

4.1%Probability of exploitation in the next 30 days