{"vulnerability": "cve-2026-12495", "sightings": [{"uuid": "446485dd-2e32-4f93-8f5a-abade69f4be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12495", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3msxjlr7j7b2q", "content": "Original text: \"Hardware Hacking: From zero to a Pre-Auth Stack Buffer Overflow on Amazon's best-selling router\" \u2014 Rotce, rotcee.github.io (published Feb 17, 2026; updated Aug 4, 2026).\nhttps://core-jmp.org/2026/08/hardware-hacking-mercusys-mb115-4g-uart-root-cve-2026-12495/", "creation_timestamp": "2026-08-13T11:20:18.048753Z"}, {"uuid": "b7e1ba5e-9c2b-4081-851b-78a508bae863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12495", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrn2sy6nmo2y", "content": "CVE-2026-12495\nAn attacker can send a special request to the web interface of your Mercusys MB115-4G device, causing it to crash and preventing you from accessing the web administration service. This can happen even if you're\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-27T14:04:04.587685Z"}, {"uuid": "e8627989-9894-49eb-a4bf-a6ba63b3eaf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12495", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mrpd7oaini2g", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-12495\n\nDenial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G device's web interf...", "creation_timestamp": "2026-07-28T11:39:39.859770Z"}]}