Mercku — Vulnerabilities & Security Advisories 5

Mercku operates as a proximity marketing platform enabling businesses to engage customers via Bluetooth beacons. Historically, the platform has been vulnerable to multiple security issues including remote code execution, cross-site scripting, and privilege escalation vulnerabilities. These weaknesses have allowed attackers to potentially compromise systems, execute arbitrary code, or gain unauthorized access. Mercku's security posture has been inconsistent, with five CVEs recorded to date, reflecting ongoing challenges in secure development practices. While no major public incidents have been widely reported, the pattern of vulnerabilities suggests potential risks for organizations relying on their proximity marketing solutions, particularly those deployed in security-sensitive environments.