CVE-2026-78861

Mercusys AC12 V2 devices are vulnerable due to a hardcoded 512-bit RSA private key, which allows local attackers to execute arbitrary code. This vulnerability poses a significant risk as it can lead to unauthorized access and control over the affected devices. Organizations using these devices should prioritize remediation to mitigate potential exploitation.