CVE-2026-4167 - Vulnerability Analysis

Overview

Belkin F9K1122 1.00.33 contains a stack-based buffer overflow caused by manipulation of the "webpage" argument in /goform/formReboot, letting remote attackers execute arbitrary code, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest available version.

References

• https://vuldb.com/?submit.769727
• https://github.com/Litengzheng/vul_db/blob/main/Belkin/vul_152/README.md
• https://github.com/Litengzheng/vul_db/blob/main/Belkin/vul_152/README.md#proof-of-concept-poc
• https://vuldb.com/?ctiid.351074
• https://vuldb.com/?id.351074

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 16, 2026

🟠 CVE-2026-4167 - High (8.8) A vulnerability was determined in Belkin F9K1122 1.00.33. This affects the function formReboot of the file /goform/formReboot. This manipulation of the argument webpage causes stack-based buffer overflow. The attack may be initiated remotely. The ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4167/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner