CVE-2026-5044

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A security vulnerability has been detected in Belkin F9K1122 1.00.33. This affects the function formSetSystemSettings of the file /goform/formSetSystemSettings of the component Setting Handler. Such manipulation of the argument webpage leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119CWE-121CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Mar 29, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-504407.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized atCVE-2026-504417.8Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.CVE-2026-504425.5Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information loCVE-2026-504448.8Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a netCVE-2026-504457.5Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.CVE-2026-504479.8Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.CVE-2026-504487.8Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.CVE-2026-504497.0Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.CVE-2026-50458.8A vulnerability was detected in Tenda FH1201 1.2.0.14(408). This impacts the function WrlclientSet of the file /goform/WrlclientSet of the cCVE-2026-504507.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service alCVE-2026-504517.8Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate prCVE-2026-504528.1Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attack
CVE-2026-5044: High severity, CVSS 8.8 | Vulnix