Skip to main content

Belkin F9K1122 CVE-2026-4566

| EUVD-2026-14347 HIGH
Stack-based Buffer Overflow (CWE-121)
2026-03-23 VulDB
7.4
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

6
Re-analysis Queued
Apr 29, 2026 - 22:22 vuln.today
cvss_changed
CVSS changed
Apr 29, 2026 - 22:22 NVD
8.8 (HIGH) 7.4 (HIGH)
PoC Detected
Mar 23, 2026 - 14:31 vuln.today
Public exploit code
EUVD ID Assigned
Mar 23, 2026 - 02:30 euvd
EUVD-2026-14347
Analysis Generated
Mar 23, 2026 - 02:30 vuln.today
CVE Published
Mar 23, 2026 - 01:30 nvd
HIGH 8.8

DescriptionNVD

A flaw has been found in Belkin F9K1122 1.00.33. The affected element is the function formWISP5G of the file /goform/formWISP5G. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Stack-based buffer overflow in Belkin F9K1122 firmware version 1.00.33 allows authenticated remote attackers to achieve complete system compromise through manipulation of the webpage parameter in the formWISP5G function. Public exploit code exists for this vulnerability and the vendor has not provided patches or responded to disclosure attempts. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Identify and inventory all Belkin F9K1122 devices on the network and restrict administrative access to trusted personnel only. Within 7 days: Implement network segmentation to isolate affected routers from critical systems and deploy WAF rules to block malicious formWISP5G requests. …

Sign in for detailed remediation steps.

Share

CVE-2026-4566 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy