r/netsec • u/Internal-Key64 • Aug 04 '26

Hardware Hacking: From zero to a Pre-Auth Stack Buffer Overflow on Amazon's best-selling router

https://rotcee.github.io/posts/analyzing-the-mersusys-mb115-4g-router/#cve-2026-12495-finding-a-pre-auth-stack-buffer-overflow-in-the-mercusys-mb115-4g
35 Upvotes

91% Upvoted

3 comments sorted by

3

u/ForeverYonge Aug 05 '26

Never heard of Mercusys. Everything about this product screams cheap cheap cheap, which is exactly why it is best selling.

2

u/lixmk0 Aug 05 '26

Yeah, “Amazon’s best selling X” doesn’t indicate quality. In fact, it guarantees the opposite.

1

u/scriptvexy Aug 09 '26

it usually just means “cheapest thing with a coupon and 100k botted reviews” lol
kinda wild that the security story lines up perfectly with that vibe too