CVE-2026-36618: Infoleak
Mercusys AC12G (EU) V1 with firmware AC12G(EU)V1200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version (unbound 1.22.0), aiding targeted attacks against known vulnerabilities.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-36618?
The severity of CVE-2026-36618 is rated as medium with a CVSS score of 4.3.
How do I fix CVE-2026-36618?
To fix CVE-2026-36618, update your Mercusys AC12G (EU) V1 firmware to the latest version provided by the manufacturer.
What type of information does CVE-2026-36618 leak?
CVE-2026-36618 leaks the DNS resolver software version, specifically unbound 1.22.0, which can assist attackers in exploiting known vulnerabilities.
Which device is affected by CVE-2026-36618?
CVE-2026-36618 affects the Mercusys AC12G (EU) V1 with the specified firmware version.
Can CVE-2026-36618 lead to further attacks?
Yes, CVE-2026-36618 can lead to targeted attacks against the device due to the disclosure of the DNS resolver software version.