Loading story…
Two high-severity vulnerabilities, CVE-2026-5043 and CVE-2026-5044, were disclosed in the Belkin F9K1122 router running firmware 1.00.33, both enabling remote stack-based buffer overflows through manipulation of the webpage argument. The flaws affect separate handlers: formSetPassword at /goform/formSetPassword and formSetSystemSettings at /goform/formSetSystemSettings, exposing multiple attack paths in the device's web management interface.
Both CVEs are classified under CWE-119 and CWE-121, and published scoring indicates high impact to confidentiality, integrity, and availability. Public exploit information is available for both issues, and the disclosures warn that exploitation may already be occurring in the wild. The reports also state that the vendor was contacted before publication but did not respond, leaving affected Belkin F9K1122 devices potentially exposed without a confirmed vendor remediation path.
See which actors are running it and whether you're in range.
2 events from the most recent confirmed update back to the earliest known activity.
The vulnerability records state that the vendor was reportedly contacted prior to public disclosure. No response from Belkin was reported in the disclosures.
Two remotely exploitable stack-based buffer overflow vulnerabilities affecting Belkin F9K1122 firmware 1.00.33 were publicly disclosed. The flaws impact the formSetPassword and formSetSystemSettings functions via manipulation of the webpage argument, and public exploit information was noted as available.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Correlate live exploitation activity against the software you actually run, and see where you're exposed.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Two Belkin router models, **F9K1122** firmware `1.00.33` and **F9K1015** firmware `1.00.10`, were disclosed with remotely exploitable stack-based buffer overflow vulnerabilities in the `formWISP5G` function exposed through the `/goform/formWISP5G` endpoint. In both cases, an attacker can manipulate the `webpage` argument to trigger memory corruption, creating a path to compromise confidentiality, integrity, and availability on affected devices. The flaws were assigned **CVE-2026-4566** and **CVE-2026-5610**, and both are mapped to **CWE-119** and **CWE-121**. Public exploit availability was noted for each issue, increasing the immediate risk to internet-exposed or unpatched routers. The disclosures also state that the vendor was contacted before publication but did not respond, leaving defenders to identify affected Belkin devices and prioritize mitigation or replacement.
Jun 29, 2026
Two high-severity vulnerabilities have been disclosed in Tenda router firmware, affecting **FH451 `1.0.0.9`** and **FH1201 `1.2.0.14(408)`**. The flaws, tracked as **`CVE-2026-4535`** and **`CVE-2026-5045`**, are stack-based buffer overflows in the `WrlclientSet` function exposed through the `/goform/WrlclientSet` endpoint. In both cases, an attacker can trigger the issue by manipulating the `GO` argument, creating a remotely reachable attack path against the devices' web management interface. Both CVEs are classified under **`CWE-119`** and **`CWE-121`**, and published scoring indicates high impact to **confidentiality, integrity, and availability**, with some vectors rating the flaws at critical severity. Public exploit information is already available for both issues, raising the risk of real-world exploitation against unpatched internet-exposed routers and embedded deployments using the affected firmware.
Jun 29, 2026
Two high-severity vulnerabilities, **CVE-2026-6122** and **CVE-2026-6136**, were disclosed for **Tenda F451** routers, both affecting firmware `1.0.0.7` and enabling **remote stack-based buffer overflow** attacks through the device's `httpd` web interface. The flaws reside in the `/goform/L7Prot` and `/goform/L7Im` endpoints, specifically in the `frmL7ProtForm` and `frmL7ImForm` functions, where improper handling of the `page` argument can corrupt stack memory. Both CVEs are mapped to **CWE-119** and **CWE-121**, and the disclosures indicate that **public exploit details are already available**, raising the risk of near-term exploitation against exposed devices. One advisory notes the issue requires only **low privileges** for exploitation, and both entries describe the attack path as remote, making internet-accessible or poorly segmented Tenda F451 deployments a likely target for abuse.
Jun 29, 2026