Description
On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mercku | M6a | ≤ 2.1.0 | — |
Low · 3.1
CVE-2025-62774
EUVD-2025-35313GHSA-7r3h-69g8-3vqv
On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps.
Published Oct 22, 2025 · Updated Oct 22, 2025 · Assigned by mitre