CyberSecBulletin

Mersive vulnerabilities

We track 1 vulnerability in Mersive products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 4, 2025.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Mersive vulnerabilities

  • 7.5 High severity

    Solstice Pod API: Cleartext Transmission of Sensitive Information

    CVE-2025-66573Mersive

    Solstice Pod API (version 5.5, 6.2) contains an unauthenticated API endpoint (`/api/config`) that exposes sensitive information such as the session key, server version, product details, and display name. Unauthorized users can extract live session information