{"id":"CVE-2025-65289","title":"A stored Cross site scripting (XSS) vulnerability in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) router allows a remote attacker on the LAN to inject JavaScript into the router's management UI by submitting a malicious h…","summary":"A stored Cross site scripting (XSS) vulnerability in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) router allows a remote attacker on the LAN to inject JavaScript into the router's management UI by submitting a malicious h…","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"vendor":"mercurycom","product":"mr816_firmware","affected":["mr816_firmware = 081c3114_4.8.7"],"published":"2025-12-09","updated":"2026-10-16","sourceUpdated":"2026-10-16T13:10:00.173","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-65289","references":[{"url":"https://damiri.fr/en/cve/CVE-2025-65289","label":"cve@mitre.org"}],"tags":["nvd"],"epss":0.00319,"epssPercentile":0.24678,"ingestedAt":"2026-10-27T18:52:09.692Z","slug":"CVE-2025-65289","body":"## Overview\n\nA stored Cross site scripting (XSS) vulnerability in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) router allows a remote attacker on the LAN to inject JavaScript into the router's management UI by submitting a malicious hostname. The injected script is stored and later executed in the context of an administrator's browser (for example after DHCP release/renew triggers the interface to display the stored hostname). Because the management interface uses weak/basic authentication and does not properly protect or isolate session material, the XSS can be used to exfiltrate the admin session and perform administrative actions.\n\n## Affected\n\n- `mr816_firmware = 081c3114_4.8.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":34,"depthScoreParts":{"impact":33.6,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}