Mercku vulnerabilities
5 published CVEs name Mercku among the affected products.
- Published CVEs
- 5
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 0
Critical 0High 2Medium 0Low 3Not scored 0
Newest CVEs
- CVE-2025-62775
Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password.
Mercku · M6a
High8.0 - CVE-2025-62774
On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps.
Mercku · M6a
Low3.1 - CVE-2025-62773
Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator.
Mercku · M6a
Low2.4 - CVE-2025-62772
On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.
Mercku · M6a
Low3.1 - CVE-2025-62771
Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks.
Mercku · M6a
High7.5