CVE-2026-5613

CVE-2026-5613 affects Belkin F9K1015 wireless router version 1.00.10 and involves a stack-based buffer overflow vulnerability in the formReboot function accessible via the /goform/formReboot endpoint. An attacker can manipulate the webpage argument to trigger the overflow condition, potentially compromising the device. The vulnerability carries a HIGH severity rating (CVSS 8.8) with a network-based attack vector requiring low complexity and authenticated access. A successful exploit could result in high-impact consequences including confidentiality breach, integrity compromise, and complete availability disruption of the affected router. Exploitation status indicates that while public exploit code is available, the vulnerability is not currently listed on CISA's Known Exploited Vulnerabilities catalog and shows no active exploitation in the wild. Community attention remains low, with the EPSS score suggesting minimal likelihood of near-term exploitation compared to other disclosed vulnerabilities. The vendor did not respond to early disclosure attempts.