CVE-2026-78861: MERCUSYS AC12 V2 vulnerability
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
The affected product identified in the available data is the Mercusys AC12 V2. Exploitation is described as requiring a local attacker, so exposure is limited to attackers with local access or access to the same local environment.
What level of access does an attacker need?
The issue is described as exploitable by a local attacker. The provided information does not indicate that it can be exploited remotely over the internet.
What is the potential impact if exploitation succeeds?
A successful attacker can execute arbitrary code on the affected device. This could allow the attacker to run attacker-controlled code in the device environment.
What should teams do if they cannot patch immediately?
Restrict local access to the device and limit access to the local network environment where it is deployed. The provided data does not list a vendor mitigation or workaround.