Which versions of F9K1015 are affected by CVE-2026-5613?

Belkin F9K1015 wireless routers running firmware 1.00.10 contain a stack-based buffer overflow in the reboot endpoint that allows authenticated attackers to execute arbitrary code and fully…

Is there a public PoC exploit available for CVE-2026-5613?

Yes, a public proof-of-concept exploit is available for CVE-2026-5613. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-5613?

Within 24 hours: Inventory all Belkin F9K1015 devices and document firmware versions in use; disable remote management access if enabled. Within 7 days: Restrict network access to affected routers to trusted administrative IPs only using firewall rules or access control lists; disable any non-essential services on the device. Within 30 days: Evaluate replacement with a router model from a responsive vendor; contact Belkin support directly to escalate the unpatched vulnerability and request security update timeline.

F9K1015 CVE-2026-5613

Q: What is the CVSS score of CVE-2026-5613?

CVE-2026-5613 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-19154 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-04-06 VulDB

GHSA-r63g-w8j9-9fqc

Buffer Overflow Stack Overflow F9K1015

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 07, 2026 - 13:20 vuln.today

Public exploit code

EUVD ID Assigned

Apr 06, 2026 - 02:45 euvd

EUVD-2026-19154

Analysis Generated

Apr 06, 2026 - 02:45 vuln.today

CVE Published

Apr 06, 2026 - 02:30 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability was identified in Belkin F9K1015 1.00.10. This issue affects the function formReboot of the file /goform/formReboot. The manipulation of the argument webpage leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Stack-based buffer overflow in Belkin F9K1015 wireless router firmware 1.00.10 allows authenticated remote attackers to achieve code execution and full system compromise via the formReboot endpoint. The vulnerability has a publicly available exploit (GitHub POC) and requires only low-privileged authentication (EPSS risk assessment recommended but data not provided). Vendor did not respond to disclosure, indicating no patch is available.

Technical ContextAI

This vulnerability affects the formReboot function in the /goform/formReboot endpoint of Belkin F9K1015 wireless router firmware version 1.00.10 (CPE: cpe:2.3:a:belkin:f9k1015:*:*:*:*:*:*:*:*). The root cause is a CWE-121 stack-based buffer overflow triggered by improper input validation of the 'webpage' parameter. When an attacker supplies a maliciously crafted input exceeding buffer boundaries, they can overwrite stack memory, potentially redirecting execution flow. Stack-based overflows in embedded device web interfaces are particularly dangerous because they often run with elevated privileges and lack modern exploit mitigations like ASLR or stack canaries common in desktop operating systems. The /goform/ path pattern is typical of CGI-style web interfaces in consumer routers, where form handlers process user input directly without robust sanitization.

RemediationAI

No vendor-released patch identified at time of analysis - Belkin did not respond to vulnerability disclosure per the researcher's report. Given the absence of vendor support and the severity of the vulnerability, the primary remediation is hardware replacement with a currently supported router model from any vendor that provides active security updates. For organizations unable to immediately replace affected devices, implement defense-in-depth mitigations: (1) Disable remote administration interfaces entirely and restrict web management access to trusted internal networks only via firewall rules or router ACLs. (2) Change all default credentials to strong, unique passwords to reduce the attack surface since PR:L indicates low-privilege authentication is required. (3) Place affected routers behind a security gateway or segment them on isolated network zones with strict egress filtering. (4) Monitor for unauthorized reboot events or unusual administrative activity as potential indicators of exploitation attempts. Reference the vulnerability disclosure and exploit code at https://github.com/Litengzheng/vuldb_new/blob/main/Belkin%20F9K1015/vul_10/README.md and VulDB entry https://vuldb.com/vuln/355404 for technical details.