EUVD-2026-14347Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
6DescriptionCVE.org
A flaw has been found in Belkin F9K1122 1.00.33. The affected element is the function formWISP5G of the file /goform/formWISP5G. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Stack-based buffer overflow in Belkin F9K1122 firmware version 1.00.33 allows authenticated remote attackers to achieve complete system compromise through manipulation of the webpage parameter in the formWISP5G function. Public exploit code exists for this vulnerability and the vendor has not provided patches or responded to disclosure attempts. An attacker with network access can execute arbitrary code with full system privileges (confidentiality, integrity, and availability impact).
Technical ContextAI
This vulnerability affects the Belkin F9K1122 wireless router (CPE: cpe:2.3:a:belkin:f9k1122:*:*:*:*:*:*:*:*) running firmware version 1.00.33. The root cause is classified as CWE-121 (Stack-based Buffer Overflow), which occurs when the formWISP5G function fails to properly validate the length of user-supplied input to the 'webpage' parameter before copying it to a fixed-size stack buffer. The /goform/formWISP5G endpoint is part of the router's web-based administrative interface, likely handling wireless ISP (WISP) configuration for the 5GHz band. Stack-based buffer overflows allow attackers to overwrite adjacent memory on the stack, including return addresses and function pointers, enabling control of program execution flow and potential remote code execution in the context of the device's administrative processes.
RemediationAI
No official patch or firmware update is available from Belkin as the vendor did not respond to vulnerability disclosure attempts. Until Belkin releases a security update for the F9K1122 firmware, users should implement immediate compensatory controls: disable remote administrative access to the router's web interface, ensure the administrative interface is only accessible from trusted internal network segments, implement strong authentication credentials if not already in place (though this only marginally reduces risk given the PR:L requirement is already met by default admin access), and consider replacing the affected device with an alternative router model from a vendor with active security support. Network segmentation should be employed to isolate the vulnerable device and limit potential impact. Organizations should monitor Belkin's support pages and consider contacting Belkin support directly to request security updates, though the lack of vendor response suggests end-of-life status for this product line.
Remote code execution via stack-based buffer overflow in Belkin F9K1122 router firmware allows authenticated attackers t
Stack-based buffer overflow in Belkin F9K1122 router firmware 1.00.33 enables authenticated remote attackers to achieve
Stack-based buffer overflow in Belkin F9K1122 router version 1.00.33 allows authenticated remote attackers to achieve fu
Stack-based buffer overflow in Belkin F9K1122 router (firmware 1.00.33) enables authenticated remote attackers to achiev
Stack-based buffer overflow in Belkin F9K1122 router firmware 1.00.33 allows authenticated remote attackers to achieve a
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today