TI-2025-07986 Aliases CVE-2025-8730 GHSA-7rgh-5f2m-h2j8

Belkin F9K1009/F9K1010 Web Interface hard-coded credentials

HIGH 81CWE-259Published 2025-08-08 · Updated 2025-08-08

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-259.

Summary

A vulnerability was found in Belkin F9K1009 and F9K1010 2.00.04/2.00.09 and classified as critical. Affected by this issue is some unknown functionality of the component Web Interface. The manipulation leads to hard-coded credentials. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.03743 89th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Belkin	F9K1009	2.00.04; 2.00.09	—	No fix listed	CNA
Belkin	F9K1010	2.00.04; 2.00.09	—	No fix listed	CNA

F9K1009 VendorBelkin Affected 2.00.04; 2.00.09 Fixed in — No fix listed CNA
F9K1010 VendorBelkin Affected 2.00.04; 2.00.09 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-8730
2026-10-03 Alias added: GHSA-7rgh-5f2m-h2j8

References

Exploit 1

https://github.com/Nicholas-wei/bug-discovery/blob/main/belkin/F9K1010_WW_2.00.04/belkin_F9K1010_WW_2.00.04_hardcoded_credential.pdf

Other 1

https://github.com/Nicholas-wei/bug-discovery/blob/main/belkin/F9K1009_WW_2.00.09/belkin%20F9K1009_WW_2.00.09_hardcoded_credential.pdf

TI-2023-11982 A stack-based buffer overflow in the ChangeFriendlyName() function of Belkin Smart Outlet… CVSS 3.1CRITICAL 9.8
TI-2019-09566 The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the… CVSS 3.0CRITICAL 9.8
TI-2014-01269 Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before… CVSS 2.0HIGH 10.0
TI-2018-01059 OS command injection in Belkin N750 DB Wi-Fi Dual-Band N+ Gigabit Router CVSS 3.0CRITICAL 9.8
TI-2026-04937 Belkin F9K1015 formSetFirewall stack-based overflow CVSS 4.0HIGH 8.7
TI-2026-04936 Belkin F9K1015 Setting formSetSystemSettings stack-based overflow CVSS 4.0HIGH 8.7

See all 91 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences