Huawei Router Critical Vulnerability (CVE-2017-17309 / EDB-ID: 42634)
Discovered and reported a critical security vulnerability in Huawei HG255s routers.
AHMET MERSIN
Technician & Cybersecurity Researcher
"I have gained experience working at the world's largest energy and automation company and Europe's leading home appliances manufacturer. I identified security vulnerabilities in assets belonging to global giants and earned awards. Throughout these processes, I have developed strong collaboration skills by working with diverse teams."
ACHIEVEMENTS
View News →
OpenWrt Root Command Injection (CVE-2026-46368)
Discovered a root command injection (CWE-77, CVSS 8.8 High) in OpenWrt's luci-app-https-dns-proxy: shell metacharacters in the setInitAction ubus RPC 'name' parameter allow arbitrary command execution as root. Published on Exploit-DB (EDB-52521).
Dutch Central Bank (DNB)
Received official reference postmail for vulnerability discovery.
Hürriyet Media - Vulnerability Hunter
Featured in national media for discovering security vulnerabilities.
Global Security Research
Discovered and reported vulnerabilities in industry giants such as U.S. Dept Of Defense, General Motors, Uber, Yahoo, Yandex, Bosch, and many more.
PATENTS
ML-DC1 — ESP32-based ambient intelligence desk device
Publication No: TR 2026005478 A2 · Asymmetric dual-channel output architecture + cloud–hardware bridge system
ML-RF1 — SDR preselector
Application No: 2026/004623 · PCB: ESP32/RP2040, PE4259 switch, SPF5189Z LNA, 5-band SAW filter bank
EXPERIENCE
06.2025 - Present
IME TECHNICIAN
Schneider Electric · Manisa
- Developed software and macros to improve personnel efficiency and optimize workflows.
- Managed the full lifecycle of corporate IT & Smart Factory systems, including planning, procurement, installation, and technical support processes.
- Performed cybersecurity risk analyses for Industrial Control Systems (ICS) and SCADA environments in the production area; prepared technical reports containing vulnerabilities and recommendations for improvement.
01.2024 - 06.2025
R&D TECHNICIAN
BEKO
- Managed projects by applying Agile principles, tracked internal team tasks via Jira, and optimized workflows.
- Demonstrated knowledge of Teamcenter and SAP software; managed product lifecycles from concept to end-of-service.
- Proposed process improvements by conducting comprehensive data analyses on SMM, BOM, and business processes using Excel pivot tables.
07.2021 - 10.2023
HVAC TECHNICIAN
Tor Demir Metal · Manisa
- Preparation of prototypes and guidelines for mass production stages.
- Optimized technical production processes and ensured maximum machinery uptime.
08.2019 - 04.2021
HVAC TECHNICIAN
Termokar · Manisa
- Control of production processes and operational quality.
- Ensured rigorous quality control standards across assembly lines.
01.2019 - 06.2019
IT & CYBERSECURITY INTERN
Balıkesir University, IT Department
- Acquired hands-on expertise in network administration and enterprise security monitoring within a large-scale academic environment.
01.2015 - Present
CYBERSECURITY RESEARCHER
HackerOne / Bugcrowd
- Identified security vulnerabilities in various web services and digital assets through bug bounty programs.
- Analyzed discovered vulnerabilities and prepared detailed, clear security reports.
- Contributed to increasing corporate security levels by providing actionable recommendations for closing vulnerabilities.
EDUCATION
2024 - 2026
ANADOLU UNIVERSITY
Computer Programming (Associate Degree)
2021 - 2023
ANADOLU UNIVERSITY
Occupational Health and Safety (Associate Degree)
2016 - 2019
BALIKESİR UNIVERSITY
Air Conditioning & Refrigeration Tech (Associate Degree)