CVE-2026-12495

CVE-2026-12495 : A stack-based buffer overflow in the Mercusys MB115-4G web interface (httpd) is triggered by the http_gdpr_decrypt function. An unauthenticated attacker can send a crafted request to /cgi/login, causing memory corruption and HTTPD crash, resulting in DoS of the web administration...

EUVD-2026-49144

Denial-of-service DoS vulnerability due to a stack buffer overflow in the httpgdprdecrypt function of the Mercusys MB115-4G device's web interface. An unauthenticated attacker could exploit this vulnerability by sending a specially crafted request to the /cgi/login endpoint, causing memory...