Loading story…
Two Belkin router models, F9K1122 firmware 1.00.33 and F9K1015 firmware 1.00.10, were disclosed with remotely exploitable stack-based buffer overflow vulnerabilities in the formWISP5G function exposed through the /goform/formWISP5G endpoint. In both cases, an attacker can manipulate the webpage argument to trigger memory corruption, creating a path to compromise confidentiality, integrity, and availability on affected devices.
The flaws were assigned CVE-2026-4566 and CVE-2026-5610, and both are mapped to CWE-119 and CWE-121. Public exploit availability was noted for each issue, increasing the immediate risk to internet-exposed or unpatched routers. The disclosures also state that the vendor was contacted before publication but did not respond, leaving defenders to identify affected Belkin devices and prioritize mitigation or replacement.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
A second CVE entry documented a remotely exploitable stack-based buffer overflow in the formWISP5G function of the /goform/formWISP5G endpoint on Belkin F9K1015 version 1.00.10. The report said the issue was received by cna@vuldb.com on April 6, 2026, that a public exploit had been disclosed, and that the vendor did not respond before publication.
A CVE entry was recorded for a remotely exploitable stack-based buffer overflow in the formWISP5G function of the /goform/formWISP5G endpoint on Belkin F9K1122 firmware 1.00.33. The disclosure noted that a public exploit was available and that the vendor had been contacted earlier but did not respond.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Two high-severity vulnerabilities, **CVE-2026-5043** and **CVE-2026-5044**, were disclosed in the **Belkin F9K1122** router running firmware **1.00.33**, both enabling remote stack-based buffer overflows through manipulation of the `webpage` argument. The flaws affect separate handlers: `formSetPassword` at `/goform/formSetPassword` and `formSetSystemSettings` at `/goform/formSetSystemSettings`, exposing multiple attack paths in the device's web management interface. Both CVEs are classified under **CWE-119** and **CWE-121**, and published scoring indicates high impact to confidentiality, integrity, and availability. Public exploit information is available for both issues, and the disclosures warn that exploitation may already be occurring in the wild. The reports also state that the vendor was contacted before publication but did not respond, leaving affected Belkin F9K1122 devices potentially exposed without a confirmed vendor remediation path.
Jun 29, 2026
Two high-severity vulnerabilities have been disclosed in Tenda router firmware, affecting **FH451 1.0.0.9** and **F453 1.0.0.3**. The flaws are tracked as `CVE-2026-4534` and `CVE-2026-4552` and both involve remotely reachable stack-based buffer overflows in web management handlers. In the FH451 case, the issue is in the `formWrlExtraSet` function exposed through the `/goform/WrlExtraSet` component, where manipulation of the `GO` argument can trigger memory corruption. In the F453 case, the vulnerable code is the `fromVirtualSer` function behind the `/goform/VirtualSer` endpoint, where the `page` argument can be abused to cause a similar overflow. Both CVE records indicate that **public exploits are available**, increasing the likelihood of opportunistic attacks against exposed devices. The disclosures map the weaknesses to `CWE-119` and `CWE-121`, reflecting out-of-bounds memory handling and stack-based buffer overflow conditions, and the published scoring points to high impact on confidentiality, integrity, and availability. Organizations using these Tenda models should treat the flaws as urgent remote compromise risks, especially where router administration interfaces are internet-accessible.
Jun 29, 2026
Two high-severity vulnerabilities have been disclosed in Tenda routers, both enabling remote stack-based buffer overflows through exposed `/goform/` endpoints. **CVE-2026-4551** affects the Tenda **F453** running version `1.0.0.3`, where the `fromSafeClientFilter` function in the `/goform/SafeClientFilter` handler can be exploited by manipulating the `menufacturer/Go` argument. **CVE-2026-5990** affects the Tenda **F451** running version `1.0.0.7`, where the `fromSafeEmailFilter` function in the `/goform/SafeEmailFilter` component can be triggered via the `page` argument. Both flaws are classified under **CWE-119** and **CWE-121** and are described as remotely exploitable with **public exploit information available**, raising the risk of active abuse against exposed devices. The CVE records assign high impact across **confidentiality, integrity, and availability** in published CVSS scoring, indicating that successful exploitation could give attackers a powerful path to compromise vulnerable edge networking equipment.
Jun 29, 2026