CVE-2025-56463
Published Sep 26, 2025Mercusys MW305R 3.30 and below is has a Transport Layer Security (TLS) certificate private key disclosure.
- evidence mentions
- 2
- Buzz score
- 22.0
Vendor archive
mercusys CVEs
Beta · best-effort7 CVEs tagged to vendor mercusys — 0 Critical, 3 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2022-26988
Published May 10, 2022TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MntAte` function. Local users could get remote co…
CVE-2022-26987
Published May 10, 2022TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MmtAtePrase` function. Local users could get remo…
CVE-2021-25811
Published Apr 29, 2021MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listen_http_lan parameter. Upon subsequent device restarts after this vulnerability is…
CVE-2021-25810
Published Apr 29, 2021Cross site Scripting (XSS) vulnerability in MERCUSYS Mercury X18G 1.0.5 devices, via crafted values to the 'src_dport_start', 'src_dport_end', and 'dest_port' parameters.
CVE-2021-23242
Published Jan 7, 2021MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ to the UPnP server, as demonstrated by the /../../conf/template/uhttpd.json URI.
CVE-2021-23241
Published Jan 7, 2021MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ in conjunction with a loginLess or login.htm URI (for authentication bypass) to the web server, as demonstrat…
Showing 1-7 of 7 CVEsPage 1 of 1