CVE-2021-25810: Mercusys Mercury x18g Firmware

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross site Scripting (XSS) vulnerability in MERCUSYS Mercury X18G 1.0.5 devices, via crafted values to the 'src_dport_start', 'src_dport_end', and 'dest_port' parameters.

Affected products

• Mercusys Mercury x18g Firmware: version 1.0.5 only

Published 2021-04-29. Last modified 2026-06-17.