Description
On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mercku | M6a | ≤ 2.1.0 | — |
Low · 3.1
CVE-2025-62772
EUVD-2025-35315GHSA-h5x7-xvx7-3c6r
On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.
Published Oct 22, 2025 · Updated Oct 22, 2025 · Assigned by mitre