CVE-2026-78862

MediumCVSS 6.8

Published: 05/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

6th percentile - higher than 6% of all known CVEs

Summary

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board (PCB).

Risk Assessment

A local attacker with physical access to the device could use the UART interface to execute arbitrary code, taking control of the router. This may lead to full compromise of the device and network.

Recommendation

Restrict physical access to the device and its PCB. Apply physical security measures to prevent access to the UART interface.

Other vulnerabilities in Mercusys AC12 V2

See all

Original NVD description (English source)

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board (PCB)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS