Code Injection Vulnerability in MR-GM5L-S1 and MR-GM5A-L1 Products by MRL
CVE-2026-20892

8.6HIGH

Key Information:

Vendor

Micro Research Ltd.

Status
Mr-gm5l-s1
Mr-gm5a-l1
Vendor
CVE Published:
11 March 2026

What is CVE-2026-20892?

A code injection vulnerability has been identified in the MR-GM5L-S1 and MR-GM5A-L1 products, which may allow an attacker with administrative privileges to execute arbitrary commands on the affected systems. This risk can lead to significant security breaches, and users are advised to implement security measures immediately.

Affected Version(s)

MR-GM5A-L1 firmware versions prior to v2.01.04N1_02

MR-GM5L-S1 firmware versions prior to v2.01.04N1_02

References

https://www.mrl.co.jp/download/security/JVNVU98103854.pdf
https://jvn.jp/en/vu/JVNVU98103854/

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.