CVE-2025-11292 | Belkin F9K1015 1.00.10 formBSSetSitesurvey wan_ipaddr command injection

October 4, 2025 Yanac

A vulnerability was found in Belkin F9K1015 1.00.10. It has been declared as critical. Affected is an unknown function of the file /goform/formBSSetSitesurvey. Executing manipulation of the argument wan_ipaddr can lead to command injection.

This vulnerability is tracked as CVE-2025-11292. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More