CVE-2026-5043

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A weakness has been identified in Belkin F9K1122 1.00.33. The impacted element is the function formSetPassword of the file /goform/formSetPassword of the component Parameter Handler. This manipulation of the argument webpage causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119CWE-121CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Mar 29, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-504305.5Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose informatiCVE-2026-504315.5Windows Quality of Service (QoS) Packet Scheduler Information Disclosure VulnerabilityCVE-2026-504326.5Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network.CVE-2026-504337.8Use after free in Windows Media allows an authorized attacker to elevate privileges locally.CVE-2026-504345.5Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose informatiCVE-2026-504357.8Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.CVE-2026-504367.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-504375.5Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.CVE-2026-504388.8Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges lCVE-2026-504399.8Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.CVE-2026-50448.8A security vulnerability has been detected in Belkin F9K1122 1.00.33. This affects the function formSetSystemSettings of the file /goform/foCVE-2026-504407.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized at
CVE-2026-5043: High severity, CVSS 8.8 | Vulnix