Buffer Overflow in Mercusys MW302R Affects Its Administrative Web Interface

CVE-2026-31267

What is CVE-2026-31267?

The Mercusys MW302R router is vulnerable to a buffer overflow in its administrative web interface. An authenticated attacker possessing administrative privileges can exploit this vulnerability by sending a specially crafted request, potentially leading to a denial of service. This exploitation manipulates control flow, aiming to redirect execution to an arbitrary address, which can cause the system to crash and severely disrupt network function.

References