BarrYPL

CVE-2026-31267 – Mercusys MW302R Denial of Service

Summary

A denial-of-service vulnerability exists in the administrative web interface of Mercusys MW302R firmware version 1.4.10 (Build 231023) and earlier.

Affected Product

• Vendor: Mercusys
• Product: MW302R
• Affected Firmware Version: MW302R(EU)_V1_1.4.10 Build 231023
• Component: Administrative Web Interface

BarrYPL

#include <Wire.h>

//Tablice na argumenty
char arg1[20];
char arg2[20];
char arg3[20];
char inChar;

void setup() {
  Serial.begin(9600);

BarrYPL

#include <Adafruit_NeoPixel.h>
#include <FastLED.h>

#define NUM_LEDS 30
#define LED_PIN 6
#define POWER_LED 9
#define ANALOG_READ 0
#define KNOB_PIN  A1
#define KNOB2_PIN A3

BarrYPL

#include <Keyboard.h>
#include <FastLED.h>
#include <Adafruit_NeoPixel.h>

#define FASTLED_ALLOW_INTERRUPTS 0
#define NUM_LEDS 26
#define LED_PIN 5
#define LED_TYPE WS2811
#define COLOR_ORDER GRB
#define ANALOG_READ 0

BarrYPL

#include <Keyboard.h>
#include <FastLED.h>
#include <Adafruit_NeoPixel.h>

#define FASTLED_ALLOW_INTERRUPTS 0
#define NUM_LEDS 24
#define LED_PIN 5
#define LED_TYPE WS2811
#define COLOR_ORDER GRB
#define ANALOG_READ 0

BarrYPL

#include <FastLED.h>

#define NUM_LEDS 8
#define LED_PIN 6
#define LED_TYPE WS2812
#define COLOR_ORDER GRB
#define ANALOG_READ 0
CRGB led[NUM_LEDS];

#define BRIGHTNESS 28

BarrYPL

#include <Keyboard.h>

int ledPin1 = 4;
int inPin1 = 8;
int ledPin2 = 6;
int inPin2 = 9;
int val = 0;


void setup() {