Mercurycom

12 CVEs across 14 Mercurycom products. Browse Mercurycom vulnerabilities, severities, and proof-of-concept exploits.

Mercurycom products with known CVEs

ProductCVEs
Mipc252w4
Mipc252w Firmware4
D196g2
D196g Firmware2
Mr8162
Mr816 Firmware2
A151
A15 Firmware1
Mac1200r1
Mac1200r Firmware1
Mipc451-41
Mipc451-4 Firmware1
Mr8041
Mr804 Firmware1
Mercurycom CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-35903Critical9.82026-04-27MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service. After successful Digest authent…
CVE-2026-35902Medium6.22026-04-27The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts. By repeatedly sending RTSP reque…
CVE-2026-35901Medium4.42026-04-27A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by r…
CVE-2026-31256High7.52026-04-27A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n. During the processing of a SETUP req…
CVE-2025-50401Critical9.82025-12-16Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter password.
CVE-2025-50398Critical9.82025-12-16Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter fac_password.
CVE-2025-65289Medium6.12025-12-09A stored Cross site scripting (XSS) vulnerability in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) router allows a remote attacker on the LAN to…
CVE-2025-65288Medium6.52025-12-09A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs when the device accepts and stores excessively long hostnames from LAN…
CVE-2023-46518Critical9.82023-10-25Mercury A15 V1.0 20230818_1.0.3 was discovered to contain a command execution vulnerability via the component cloudDeviceTokenSuccCB.
CVE-2021-27825High7.52023-05-29A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL.
CVE-2022-31849High8.82022-06-16MERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code execution (RCE) vulnerability which is exploitable via a crafted POST…
CVE-2012-49992012-09-19Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service hang) via a crafted string in HTTP header…