CVE-2026-5628

CVE-2026-5628 is a stack-based buffer overflow vulnerability in the Belkin F9K1015 router (version 1.00.10) affecting the formSetSystemSettings function in the Setting Handler component. The flaw is triggered through improper validation of the "webpage" parameter, allowing an attacker to overflow the stack and potentially execute arbitrary code. The vulnerability carries a HIGH severity rating of 8.8 on the CVSS v3.1 scale, with an unauthenticated network attack vector and low attack complexity. An authenticated user can remotely exploit this issue to achieve complete compromise of system confidentiality, integrity, and availability. The FAUCET Risk Score of 52.0/100 indicates moderate concern. Exploitation status is low-risk at present, with no evidence of active exploitation in the wild and no inclusion on the CISA Known Exploited Vulnerabilities list. However, exploit code has been publicly disclosed, creating a potential threat if weaponized. The vendor was notified but provided no response, leaving no patched version available to end users.