Products: 1
    Vulnerabilities: 5
    Known Exploited: 0
    0
    Critical Level Threats
    2
    High Level Threats
    0
    Medium Level Threats
    3
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2025-62771

    Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks.

    Last Modified: Apr 15, 2026
    Published: Oct 22, 2025

    CVE-2025-62772

    On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.

    Last Modified: Apr 15, 2026
    Published: Oct 22, 2025

    CVE-2025-62774

    On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps.

    Last Modified: Apr 15, 2026
    Published: Oct 22, 2025

    CVE-2025-62775

    Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password.

    Last Modified: Apr 15, 2026
    Published: Oct 22, 2025

    CVE-2025-62773

    Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator.

    Last Modified: Apr 15, 2026
    Published: Oct 22, 2025
    Items Per Page
    Mercku Vulnerabilities & Security CVEs | CVE-DB