CVE-2026-78862

Unknown

Published: 05/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Summary

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board (PCB).

Risk Assessment

A local attacker with physical access to the device could use the UART interface to execute arbitrary code, taking control of the router. This may lead to full compromise of the device and network.

Recommendation

Restrict physical access to the device and its PCB. Apply physical security measures to prevent access to the UART interface.

Other vulnerabilities in Mercusys AC12 V2

See all

CVE-2026-78861Unknown
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key.
CVE-2026-78860Unknown
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext.

Original NVD description (English source)

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board (PCB)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS