Mercurycom

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Mercurycom records in CISA KEV

No Mercurycom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mipc252w Firmware 4 records HIGH D196g Firmware 2 records HIGH Mr816 Firmware 2 records MEDIUM A15 Firmware 1 record MEDIUM Mac1200r Firmware 1 record MEDIUM Mipc451-4 Firmware 1 record MEDIUM Mr804 1 record LOW Mr804 Firmware 1 record LOW

Records

2 records in Mr816 Firmware · all components

TI-2025-40314 CVE-2025-65288 · GHSA-gxr6-pcf7-p63v

A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs…

MEDIUM 62

A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs when the device accepts and stores excessively long hostnames from LAN hosts without proper length validation.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00397 Published 2025-12-09 No fix listed CWE-120

TI-2025-40315 CVE-2025-65289 · GHSA-m239-qhfc-2cv2

A stored Cross site scripting (XSS) vulnerability in the Mercury MR816v2 (081C3114 4.8.7…

MEDIUM 60

A stored Cross site scripting (XSS) vulnerability in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) router allows a remote attacker on the LAN to inject JavaScript into the router's management UI by submitt…

CVSS 3.1MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.00319 Published 2025-12-09 No fix listed CWE-79

Open these records in search →

Critical	4
High	3
Medium	5
Low	0
No CVSS	0