Mercusys

10 CVEs across 8 Mercusys products. Browse Mercusys vulnerabilities, severities, and proof-of-concept exploits.

Mercusys products with known CVEs

ProductCVEs
Mercury X18g4
Mercury X18g Firmware4
Mercury D196g2
Mercury D196g Firmware2
Mw301r2
Mb115-4g1
Mw305r1
Mw305r Firmware1
Mercusys CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-124952026-07-27Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G device's web interface. An unau…
CVE-2025-56463Medium6.82025-09-26Mercusys MW305R 3.30 and below is has a Transport Layer Security (TLS) certificate private key disclosure.
CVE-2025-7882Low3.12025-07-20A vulnerability was found in Mercusys MW301R 1.0.2 Build 190726 Rel.59423n. It has been rated as problematic. This issue affects some unknown processing of the…
CVE-2025-7881Low2.72025-07-20A vulnerability was found in Mercusys MW301R 1.0.2 Build 190726 Rel.59423n. It has been declared as problematic. This vulnerability affects unknown code of the…
CVE-2022-26988High7.82022-05-10TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MntAte` function. Local users…
CVE-2022-26987High7.82022-05-10TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MmtAtePrase` function. Local…
CVE-2021-25811High7.52021-04-29MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listen_http_lan parameter. Upon subsequent device restarts after th…
CVE-2021-25810Medium6.12021-04-29Cross site Scripting (XSS) vulnerability in MERCUSYS Mercury X18G 1.0.5 devices, via crafted values to the 'src_dport_start', 'src_dport_end', and 'dest_port'…
CVE-2021-23242Medium5.32021-01-07MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ to the UPnP server, as demonstrated by the /../../conf/template/uhttpd.json URI.
CVE-2021-23241Medium5.32021-01-07MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ in conjunction with a loginLess or login.htm URI (for authentication bypass) to the web s…