Security Advisories
This page lists all published security advisories for Morse Micro products. Each advisory is identified by a Morse Micro Security Advisory (MM-SA) number and references one or more CVE identifiers.
For information on how to report a vulnerability, see our Security Disclosure Policy.
Customers with active support agreements who require advance notice of advisories under embargo should contact their Morse Micro account team or security@morsemicro.com.
Advisory Feed
An Atom feed of advisories is available at feed.xml for partner security teams to subscribe to.
Published Advisories
Advisory | CVE | Title | Severity | Published |
|---|---|---|---|---|
CVE-2026-7763 | Pre-authentication heap buffer overflow in morse.ko TIM IE processing | High | 4th June 2026 | |
CVE-2026-7762 | Pre-authentication heap buffer overflow in dot11ah.ko S1G Capabilities IE processing | High | 4th June 2026 | |
CVE-2026-7764 | Pre-authentication out-of-bounds read in morse.ko Vendor IE processing | Medium | 21st May 2026 |
Naming Convention
Advisory identifiers follow the format MM-SA-YYYY-NNN where YYYY is the year of publication and NNN is a zero-padded sequence number within that year.
