CVE-2026-78860

Mercusys AC12 V2 is vulnerable to local attacks that enable arbitrary code execution due to the insecure storage of sensitive information in plaintext. This flaw poses a significant risk to the integrity and confidentiality of the device, allowing attackers to manipulate its functionality. Organizations using this router model should prioritize addressing this vulnerability to mitigate potential exploitation risks.