CVE-2026-12495
2026-07-27
12h16 +00:00
12h16 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
CVE の説明
Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G device's web interface. An unauthenticated attacker could exploit this vulnerability by sending a specially crafted request to the /cgi/login endpoint, causing memory corruption and the httpd process to crash, resulting in a denial of service for the web administration service.
CVE の情報
関連する弱点
| 弱点名 | 出典 | |
|---|---|---|
| Stack-based Buffer Overflow The product writes past the end of a buffer that was allocated on the stack. |
