CVE-2025-62771 | Mercku M6a up to 2.1.0 Password Change cross-site request forgery

October 22, 2025 Yanac

A vulnerability has been found in Mercku M6a up to 2.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Password Change Handler. The manipulation leads to cross-site request forgery.

This vulnerability is uniquely identified as CVE-2025-62771. The attack can only be initiated within the local network. Moreover, an exploit is present.VulDB Recent EntriesRead More