{"id":"CVE-2026-78860","published":"2026-10-05T20:17:27.283","lastModified":"2026-10-06T15:17:19.500","description":"An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-311","CWE-347"],"vendors":[],"products":[],"references":[{"url":"http://mercusys.com","tags":[]},{"url":"https://threadpoolx.gitbook.io/docs/cve/mercusys-ac12-v2-security-advisory/missing-firmware-encryption-and-secure-boot-mechanisms","tags":[]},{"url":"https://threadpoolx.gitbook.io/docs/cve/mercusys-ac12-v2-security-advisory/missing-firmware-encryption-and-secure-boot-mechanisms","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Mercusys AC12 V2 device stores sensitive information in plaintext, allowing a local attacker to execute arbitrary code. This represents a critical security flaw that can lead to complete system compromise.","exploitability":"Exploitation requires local access to the device with user privileges, making it moderately difficult but not highly complex to achieve.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full control over the router, potentially affecting all network traffic and enabling further attacks on the internal network.","remediation":"Upgrade to firmware version 2.590 or later to address this plaintext storage vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","local-privilege-escalation","firmware"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:56:39.881Z"}}