CVE-2025-65288

CVE-2025-65288 affects Mercury MR816v2. The reported issue is a buffer overflow in the device when accepting excessively long hostnames from LAN hosts, due to unchecked copies/concatenations into fixed-size buffers. Impact described as crash (DoS) with potential remote code execution. Affected pr...

CVE-2025-65289

Summary: CVE-2025-65289 is a stored XSS vulnerability in Mercury MR816v2 routers (version 4.8.7 Build 110427 Rel 36550n). A LAN attacker can inject JavaScript into the router’s management UI via a malicious hostname, with the script executing in an administrator’s browser context after events lik...