Belkin
93 CVEs across 61 Belkin products. Browse Belkin vulnerabilities, severities, and proof-of-concept exploits.
Belkin products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-5629 | High | 8.8 | 2026-04-06 | A vulnerability was detected in Belkin F9K1015 1.00.10. The affected element is the function formSetFirewall of the file /goform/formSetFirewall. The manipulat… |
CVE-2026-5628 | High | 8.8 | 2026-04-06 | A security vulnerability has been detected in Belkin F9K1015 1.00.10. Impacted is the function formSetSystemSettings of the file /goform/formSetSystemSettings… |
CVE-2026-5614 | High | 8.8 | 2026-04-06 | A security flaw has been discovered in Belkin F9K1015 1.00.10. Impacted is the function formSetPassword of the file /goform/formSetPassword. The manipulation o… |
CVE-2026-5613 | High | 8.8 | 2026-04-06 | A vulnerability was identified in Belkin F9K1015 1.00.10. This issue affects the function formReboot of the file /goform/formReboot. The manipulation of the ar… |
CVE-2026-5612 | High | 8.8 | 2026-04-06 | A vulnerability was determined in Belkin F9K1015 1.00.10. This vulnerability affects the function formWlEncrypt of the file /goform/formWlEncrypt. Executing a… |
CVE-2026-5611 | High | 8.8 | 2026-04-06 | A vulnerability was found in Belkin F9K1015 1.00.10. This affects the function formCrossBandSwitch of the file /goform/formCrossBandSwitch. Performing a manipu… |
CVE-2026-5610 | High | 8.8 | 2026-04-06 | A vulnerability has been found in Belkin F9K1015 1.00.10. Affected by this issue is the function formWISP5G of the file /goform/formWISP5G. Such manipulation o… |
CVE-2026-5608 | High | 8.8 | 2026-04-06 | A vulnerability was detected in Belkin F9K1122 1.00.33. Affected is the function formWlanSetup of the file /goform/formWlanSetup. The manipulation of the argum… |
CVE-2026-5044 | High | 8.8 | 2026-03-29 | A security vulnerability has been detected in Belkin F9K1122 1.00.33. This affects the function formSetSystemSettings of the file /goform/formSetSystemSettings… |
CVE-2026-5043 | High | 8.8 | 2026-03-29 | A weakness has been identified in Belkin F9K1122 1.00.33. The impacted element is the function formSetPassword of the file /goform/formSetPassword of the compo… |
CVE-2026-5042 | High | 8.8 | 2026-03-29 | A security flaw has been discovered in Belkin F9K1122 1.00.33. The affected element is the function formCrossBandSwitch of the file /goform/formCrossBandSwitch… |
CVE-2026-4566 | High | 8.8 | 2026-03-23 | A flaw has been found in Belkin F9K1122 1.00.33. The affected element is the function formWISP5G of the file /goform/formWISP5G. Executing a manipulation of th… |
CVE-2026-4167 | High | 8.8 | 2026-03-16 | A vulnerability was determined in Belkin F9K1122 1.00.33. This affects the function formReboot of the file /goform/formReboot. This manipulation of the argumen… |
CVE-2025-11303 | Medium | 6.3 | 2025-10-05 | A vulnerability was detected in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/mp. Performing a manipulation of the argument comma… |
CVE-2025-11302 | High | 8.8 | 2025-10-05 | A security vulnerability has been detected in Belkin F9K1015 1.00.10. This impacts an unknown function of the file /goform/formWpsStart. Such manipulation of t… |
CVE-2025-11301 | High | 8.8 | 2025-10-05 | A weakness has been identified in Belkin F9K1015 1.00.10. This affects an unknown function of the file /goform/formWlanSetupWPS. This manipulation of the argum… |
CVE-2025-11300 | High | 8.8 | 2025-10-05 | A security flaw has been discovered in Belkin F9K1015 1.00.10. The impacted element is an unknown function of the file /goform/formWlanMP. The manipulation of… |
CVE-2025-11299 | High | 8.8 | 2025-10-05 | A vulnerability was identified in Belkin F9K1015 1.00.10. The affected element is an unknown function of the file /goform/formWanTcpipSetup. The manipulation o… |
CVE-2025-11298 | Medium | 6.3 | 2025-10-05 | A vulnerability was determined in Belkin F9K1015 1.00.10. Impacted is an unknown function of the file /goform/formSetWanStatic. Executing a manipulation of the… |
CVE-2025-11297 | High | 8.8 | 2025-10-05 | A vulnerability was found in Belkin F9K1015 1.00.10. This issue affects some unknown processing of the file /goform/formSetLanguage. Performing a manipulation… |
CVE-2025-11296 | High | 8.8 | 2025-10-05 | A vulnerability has been found in Belkin F9K1015 1.00.10. This vulnerability affects unknown code of the file /goform/formPPTPSetup. Such manipulation of the a… |
CVE-2025-11295 | High | 8.8 | 2025-10-05 | A flaw has been found in Belkin F9K1015 1.00.10. This affects an unknown part of the file /goform/formPPPoESetup. This manipulation of the argument pppUserName… |
CVE-2025-11294 | High | 8.8 | 2025-10-05 | A vulnerability was detected in Belkin F9K1015 1.00.10. Affected by this issue is some unknown functionality of the file /goform/formL2TPSetup. The manipulatio… |
CVE-2025-11293 | High | 8.8 | 2025-10-05 | A security vulnerability has been detected in Belkin F9K1015 1.00.10. Affected by this vulnerability is an unknown functionality of the file /goform/formConnec… |
CVE-2025-11292 | Medium | 6.3 | 2025-10-05 | A weakness has been identified in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/formBSSetSitesurvey. Executing a manipulation of… |
CVE-2025-9379 | High | 7.2 | 2025-08-24 | A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler… |
CVE-2025-8730 | Critical | 9.8 | 2025-08-08 | A vulnerability was found in Belkin F9K1009 and F9K1010 2.00.04/2.00.09 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2025-7094 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been rated as critical. Affected by this issue is the function formBSSetSitesurvey of the file /gof… |
CVE-2025-7093 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been declared as critical. Affected by this vulnerability is the function formSetLanguage of the fi… |
CVE-2025-7092 | High | 8.8 | 2025-07-06 | A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. This vulnerability affects the function formWlanSetupWPS of the file /gofo… |
CVE-2025-7091 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. Affected is the function formWlanMP of the file /goform/formWlanMP of… |
CVE-2025-7090 | High | 8.8 | 2025-07-06 | A vulnerability, which was classified as critical, has been found in Belkin F9K1122 1.00.33. Affected by this issue is the function formConnectionSetting of th… |
CVE-2025-7089 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. This issue affects the function formWanTcpipSetup of the file /goform/formWanTc… |
CVE-2025-7088 | High | 8.8 | 2025-07-06 | A vulnerability, which was classified as critical, was found in Belkin F9K1122 1.00.33. This affects the function formPPPoESetup of the file /goform/formPPPoES… |
CVE-2025-7087 | High | 8.8 | 2025-07-06 | A vulnerability classified as critical was found in Belkin F9K1122 1.00.33. Affected by this vulnerability is the function formL2TPSetup of the file /goform/fo… |
CVE-2025-7086 | High | 8.8 | 2025-07-06 | A vulnerability classified as critical has been found in Belkin F9K1122 1.00.33. Affected is the function formPPTPSetup of the file /goform/formPPTPSetup of th… |
CVE-2025-7085 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been rated as critical. This issue affects the function formiNICWpsStart of the file /goform/formiN… |
CVE-2025-7084 | High | 8.8 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been declared as critical. This vulnerability affects the function formWpsStart of the file /goform… |
CVE-2025-7083 | Medium | 6.3 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. This affects the function mp of the file /goform/mp of the component w… |
CVE-2025-7082 | Medium | 6.3 | 2025-07-06 | A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this issue is the function formBSSetSitesurvey of the file /goform/… |
CVE-2025-7081 | Medium | 6.3 | 2025-07-06 | A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this vulnerability is the function formSetWanStatic of the fil… |
CVE-2023-33768 | Medium | 6.5 | 2023-07-13 | Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows attackers to cause a De… |
CVE-2023-27217 | Critical | 9.8 | 2023-05-18 | A stack-based buffer overflow in the ChangeFriendlyName() function of Belkin Smart Outlet V2 F7c063 firmware_2.00.11420.OWRT.PVT_SNSV2 allows attackers to caus… |
CVE-2022-30105 | Critical | 9.8 | 2022-05-18 | In Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp, which is accessible before and after configuring the device, exhibits multiple remo… |
CVE-2021-25310 | High | 8.8 | 2021-02-02 | The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated attackers to execute system commands wit… |
CVE-2020-26561 | High | 8.8 | 2020-10-23 | Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have a stack-based buffer overflow vulnerability because of sprintf in create_dir in mini_httpd. Success… |
CVE-2013-2679 | Medium | 6.1 | 2020-02-18 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow remote attackers to inject arbitrary web s… |
CVE-2013-7173 | Critical | 9.8 | 2020-02-13 | Belkin n750 routers have a buffer overflow. |
CVE-2013-3091 | Critical | 9.8 | 2020-02-07 | An Authentication Bypass vulnerability in Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication using "Javascript debugging." |
CVE-2013-2748 | Critical | 9.8 | 2020-01-28 | Belkin Wemo Switch before WeMo_US_2.00.2176.PVT could allow remote attackers to upload arbitrary files onto the system. |
CVE-2019-17094 | High | 8.3 | 2020-01-27 | A Stack-based Buffer Overflow vulnerability in libbelkin_api.so component of Belkin WeMo Insight Switch firmware allows a local attacker to obtain code executi… |
CVE-2013-3088 | Critical | 9.8 | 2019-12-26 | Belkin N900 router (F9K1104v1) contains an Authentication Bypass using "Javascript debugging". |
CVE-2013-3085 | Critical | 9.8 | 2019-12-26 | An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2. |
CVE-2013-4655 | High | 7.5 | 2019-11-13 | Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service. |
CVE-2019-17532 | High | 7.5 | 2019-10-12 | An issue was discovered on Belkin Wemo Switch 28B WW_2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service (persistent rule… |
CVE-2019-12780 | Critical | 9.8 | 2019-06-10 | The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. A simple POST reque… |
CVE-2018-6692 | Critical | 10.0 | 2018-08-21 | Stack-based Buffer Overflow vulnerability in libUPnPHndlr.so in Belkin Wemo Insight Smart Plug allows remote attackers to bypass local security protection via… |
CVE-2018-1146 | High | 7.5 | 2018-04-19 | A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.cgi. When enabled th… |
CVE-2018-1145 | Critical | 9.8 | 2018-04-19 | A remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi. |
CVE-2018-1144 | Critical | 9.8 | 2018-04-19 | A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi. |
CVE-2018-1143 | Critical | 9.8 | 2018-04-19 | A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to twonky_comman… |
CVE-2015-5536 | | 2015-08-13 | Belkin N300 Dual-Band Wi-Fi Range Extender with firmware before 1.04.10 allows remote authenticated users to execute arbitrary commands via the (1) sub_dir par… | |
CVE-2014-1635 | | 2014-11-12 | Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via… | |
CVE-2013-3092 | | 2014-09-29 | The Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication and gain privileges via vectors related to incorrect validation of the HTTP… | |
CVE-2013-3089 | | 2014-09-29 | Cross-site request forgery (CSRF) vulnerability in apply.cgi in Belkin N300 (F7D7301v1) router allows remote attackers to hijack the authentication of administ… | |
CVE-2013-3086 | | 2014-09-29 | Cross-site request forgery (CSRF) vulnerability in util_system.html in Belkin N900 router allows remote attackers to hijack the authentication of administrator… | |
CVE-2013-3083 | | 2014-09-29 | Cross-site request forgery (CSRF) vulnerability in cgi-bin/system_setting.exe in Belkin F5D8236-4 v2 allows remote attackers to hijack the authentication of ad… | |
CVE-2014-2962 | | 2014-06-19 | Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to re… | |
CVE-2013-6952 | | 2014-02-22 | The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote attackers to spoof firmware updates and execute… | |
CVE-2013-6951 | | 2014-02-22 | The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification Authority public keys, which allows man-in-the-middle attackers t… | |
CVE-2013-6950 | | 2014-02-22 | The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-the-middle attackers to install arbitrary… | |
CVE-2013-6949 | | 2014-02-22 | The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hijack connections and… | |
CVE-2013-6948 | | 2014-02-22 | The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML document containing an… | |
CVE-2013-3090 | | 2014-01-30 | Multiple cross-site scripting (XSS) vulnerabilities in Belkin N300 router allow remote attackers to inject arbitrary web script or HTML via the Guest Access PS… | |
CVE-2013-3087 | | 2014-01-30 | Multiple cross-site scripting (XSS) vulnerabilities in Belkin N900 router allow remote attackers to inject arbitrary web script or HTML via the (1) ssid2 param… | |
CVE-2013-3084 | | 2014-01-30 | Multiple cross-site scripting (XSS) vulnerabilities in Belkin Model F5D8236-4 v2 router allow remote attackers to inject arbitrary web script or HTML via unspe… | |
CVE-2012-6371 | | 2012-12-31 | The WPA2 implementation on the Belkin N900 F9K1104v1 router establishes a WPS PIN based on 6 digits of the LAN/WLAN MAC address, which makes it easier for remo… | |
CVE-2012-4366 | | 2012-11-20 | Belkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2, and N300 Model F7D2301v1 generate a predictable default WPA2-PSK… | |
CVE-2008-7115 | | 2009-08-28 | The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain a… | |
CVE-2008-1245 | | 2008-03-10 | cgi-bin/setup_virtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a denial of service (control center outag… | |
CVE-2008-1244 | | 2008-03-10 | cgi-bin/setup_dns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administra… | |
CVE-2008-1242 | | 2008-03-10 | The control panel on the Belkin F5D7230-4 router with firmware 9.01.10 maintains authentication state by IP address, which allows remote attackers to bypass au… | |
CVE-2008-0403 | | 2008-01-23 | The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and m… | |
CVE-2007-6040 | | 2007-11-20 | The Belkin F5D7230-4 Wireless G Router allows remote attackers to cause a denial of service (degraded networking and logging) via a flood of TCP SYN packets, a… | |
CVE-2007-3784 | | 2007-07-15 | Cross-site scripting (XSS) vulnerability in the Belkin G Plus Router F5D7231-4 with firmware 4.05.03 allows remote attackers to inject arbitrary web script or… | |
CVE-2005-4417 | | 2005-12-20 | The default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed on Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM Bl… | |
CVE-2005-3802 | | 2005-11-24 | Belkin F5D7232-4 and F5D7230-4 wireless routers with firmware 4.03.03 and 4.05.03, when a legitimate administrator is logged into the web management interface… | |
CVE-2005-2374 | | 2005-07-26 | Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the (1) Telnet or (2) web administ… | |
CVE-2005-0835 | | 2005-05-02 | The SNMP service in the Belkin 54G (F5D7130) wireless router allows remote attackers to cause a denial of service via unknown vectors. | |
CVE-2005-0834 | | 2005-05-02 | Belkin 54G (F5D7130) wireless router enables SNMP by default in a manner that allows remote attackers to obtain sensitive information. | |
CVE-2005-0833 | | 2005-05-02 | Belkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then accessing those URIs, wh… | |
CVE-2002-1431 | | 2003-04-11 | Belkin F5D5230-4 4-Port Cable/DSL Gateway Router 1.20.000 modifies the source IP address of internal packets to that of the router's external interface when fo… | |
CVE-2002-1811 | | 2002-12-31 | Belkin F5D6130 Wireless Network Access Point running firmware AP14G8 allows remote attackers to cause a denial of service (connection loss) by sending several… |