Is CVE-2026-12562 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-12562 being exploited in the wild.

How severe is CVE-2026-12562?

High severity, with a CVSS score of 8.8, published 30 July 2026.

Which products and versions are affected?

Toptech Systems MultiLoad II+ < 2025-11-24; Toptech Systems RCU II+ < 2025-11-24.

Is there a fix for CVE-2026-12562?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-12562 attacked?

It is attacked from the adjacent network, in device firmware.

Am I affected by CVE-2026-12562?

Check whether you run Toptech Systems MultiLoad II+ or Toptech Systems RCU II+ at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-12562: Toptech Systems RCU II+ and Multiload II+ auth bypass in TCF service

Q: Is there a fix for CVE-2026-12562?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-12562 attacked?

It is attacked from the adjacent network, in device firmware.

Q: Am I affected by CVE-2026-12562?

Check whether you run Toptech Systems MultiLoad II+ or Toptech Systems RCU II+ at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-12562 · Severity: high · CVSS 8.8 · Published 2026-07-30

Toptech Systems RCU II+ and Multiload II+ devices, which are used in the energy sector for terminal automation and flow control, contain a security flaw that allows unauthorized access. An attacker on the same local network can bypass security controls to gain full administrative control over the device. This could allow them to disrupt operations, manipulate fuel loading processes, or access sensitive system data.

Vendors: Toptech Systems.

Quick answers

Is CVE-2026-12562 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-12562 being exploited in the wild.
How severe is CVE-2026-12562?: High severity, with a CVSS score of 8.8, published 30 July 2026.
Which products and versions are affected?: Toptech Systems MultiLoad II+ < 2025-11-24; Toptech Systems RCU II+ < 2025-11-24.
Is there a fix for CVE-2026-12562?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-12562 attacked?: It is attacked from the adjacent network, in device firmware.
Am I affected by CVE-2026-12562?: Check whether you run Toptech Systems MultiLoad II+ or Toptech Systems RCU II+ at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The RCU II+ and Multiload II+ embedded systems expose a Target Communications Framework (TCF) service on a network-accessible port without requiring authentication (CWE-306). This debug interface provides direct, unauthenticated root-level access to the underlying Linux operating system. An attacker with adjacent network access can interact with the TCF service to view or modify the filesystem, manipulate running processes, and reconfigure network interfaces. Toptech Systems has released a Vulnerability Removal Tool (VRT) and updated firmware to address the issue.

Affected products

Toptech Systems RCU II+ < 2025-11-24
Toptech Systems Multiload II+ < 2025-11-24

Timeline

2026-07-30: advisory: CISA published advisory ICSA-26-211-03
2026-07-30: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.