Buffer overflow in Mercusys Mb115-4g
CVE-2026-12495
Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G device's web interface. An unauthenticated attacker could exploit this vulnerability by sending a specially cra…
Vulnerability class: Buffer Overflow
Affected products
- Mercusys Mb115-4g — versions 1.7.0
Weakness classification (CWE)
References
- cve-coordination@incibe.es (patch)