Read the docs
TI-2025-08591 Aliases CVE-2025-9379GHSA-h8vm-xjch-3jwx

Belkin AX1800 Firmware Update data authenticity

Priority LOW 37CWE-345Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-345.

Summary

A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00331 26th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BelkinAX18001.1.00.016—No fix listedCNA
  • AX1800 VendorBelkin Affected 1.1.00.016 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-9379
  2. 2026-10-03 Alias added: GHSA-h8vm-xjch-3jwx

References

Patch 1

  • TI-2023-11982 A stack-based buffer overflow in the ChangeFriendlyName() function of Belkin Smart Outlet… CVSS 3.1CRITICAL 9.8
  • TI-2025-07986 Belkin F9K1009/F9K1010 Web Interface hard-coded credentials CVSS 4.0CRITICAL 9.3
  • TI-2019-09566 The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the… CVSS 3.0CRITICAL 9.8
  • TI-2014-01269 Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before… CVSS 2.0HIGH 10.0
  • TI-2018-01059 OS command injection in Belkin N750 DB Wi-Fi Dual-Band N+ Gigabit Router CVSS 3.0CRITICAL 9.8
  • TI-2026-04937 Belkin F9K1015 formSetFirewall stack-based overflow CVSS 4.0HIGH 8.7
See all 91 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences