CVE-2026-78862: Medium severity MERCUSYS AC12 V2 vulnerability
Published Oct 5, 2026
·Updated
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board (PCB)
Affected Software
1 affected component
MERCUSYS AC12 V2
Event History
Oct 5, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to this issue?
Devices identified as MERCUSYS AC12 V2 are affected when an attacker can obtain local physical access to the router and its PCB.
2
What does an attacker need to exploit it?
The attacker needs local access to the device and access to the UART serial interface on the printed circuit board. The available information does not indicate that remote network access alone is sufficient.
3
How can I determine whether a device may be affected?
Verify whether the device is a Mercusys AC12 V2 and inspect whether its PCB exposes an accessible UART serial interface. The provided information does not include firmware-version-specific indicators.