# Mercusys vulnerabilities Source: https://junglewise.ai/threats/vendors/mercusys Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/mercusys.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 20 vulnerabilities in Mercusys: 0 in the last 7 days and 3 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-78862, was published on 5 October 2026. Nothing in the last four weeks, down from 3 vulnerabilities in the four before. 3 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 3 - All time: 20 (0 critical, 0 exploited in the wild) ## About Mercusys Mercusys is a provider of networking devices including routers, range extenders, adapters, and switches. ## Latest Mercusys vulnerabilities - [CVE-2026-78862: Mercusys AC12 V2 arbitrary code execution via UART interface](https://junglewise.ai/threats/cve-2026-78862-an-issue-in-mercusys-ac12-v2-allows-a-local-attacker-to-execute) (info, published 5 Oct 2026) - [CVE-2026-78861: Mercusys AC12 V2 hardcoded RSA private key code execution](https://junglewise.ai/threats/cve-2026-78861-an-issue-in-mercusys-ac12-v2-allows-a-local-attacker-to-execute) (info, published 5 Oct 2026) - [CVE-2026-78860: Mercusys AC12 V2 missing firmware encryption and secure boot](https://junglewise.ai/threats/cve-2026-78860-an-issue-in-mercusys-ac12-v2-allows-a-local-attacker-to-execute) (info, published 5 Oct 2026) - [CVE-2026-12495: Mercusys MB115-4G stack buffer overflow in http_gdpr_decrypt](https://junglewise.ai/threats/cve-2026-12495-mercusys-mb115-4g-stack-buffer-overflow-in-http-gdpr-decrypt) (info, CVSS 9.2, published 27 Jul 2026) - [CVE-2026-31267: Mercusys MW302R stack buffer overflow in administrative web interface](https://junglewise.ai/threats/cve-2026-31267-mercusys-mw302r-stack-buffer-overflow-in-administrative-web) (info, CVSS 4.9, published 9 Jul 2026) - [CVE-2026-36618: Mercusys AC12G information disclosure in DNS resolver](https://junglewise.ai/threats/cve-2026-36618-mercusys-ac12g-information-disclosure-in-dns-resolver) (info, CVSS 3.7, published 3 Jun 2026) - [CVE-2026-36616: Mercusys AC12G hardcoded WiFi credentials in firmware](https://junglewise.ai/threats/cve-2026-36616-mercusys-ac12g-hardcoded-wifi-credentials-in-firmware) (info, CVSS 6.1, published 3 Jun 2026) - [CVE-2026-36615: Mercusys AC12G information disclosure in /agileconfigreset endpoint](https://junglewise.ai/threats/cve-2026-36615-mercusys-ac12g-information-disclosure-in-agileconfigreset) (info, CVSS 4.3, published 3 Jun 2026) - [CVE-2026-36613: Mercusys AC12G Information Disclosure in HTTP Server](https://junglewise.ai/threats/cve-2026-36613-mercusys-ac12g-information-disclosure-in-http-server) (info, CVSS 5.3, published 3 Jun 2026) - [CVE-2026-36612: Mercusys AC12G weak WPS lockout and predictable PIN](https://junglewise.ai/threats/cve-2026-36612-mercusys-ac12g-weak-wps-lockout-and-predictable-pin) (info, CVSS 6.5, published 3 Jun 2026) - [CVE-2026-36611: Mercusys AC12G uninitialized buffer disclosure in UPnP](https://junglewise.ai/threats/cve-2026-36611-mercusys-ac12g-uninitialized-buffer-disclosure-in-upnp) (info, CVSS 5.3, published 3 Jun 2026) - [CVE-2026-36610: Mercusys AC12G cleartext transmission of DDNS credentials](https://junglewise.ai/threats/cve-2026-36610-mercusys-ac12g-cleartext-transmission-of-ddns-credentials) (info, CVSS 5.9, published 3 Jun 2026) - [CVE-2026-36609: Mercusys AC12G V1 password recovery via static nonce and weak encoding](https://junglewise.ai/threats/cve-2026-36609-mercusys-ac12g-v1-password-recovery-via-static-nonce-and-weak) (info, CVSS 7.5, published 3 Jun 2026) - [CVE-2026-36608: Mercusys AC12G UPnP port forwarding to local admin interface](https://junglewise.ai/threats/cve-2026-36608-mercusys-ac12g-upnp-port-forwarding-to-local-admin-interface) (info, CVSS 9.6, published 3 Jun 2026) - [CVE-2026-36607: Mercusys AC12G brute-force protection bypass in TDDP endpoint](https://junglewise.ai/threats/cve-2026-36607-mercusys-ac12g-brute-force-protection-bypass-in-tddp-endpoint) (info, CVSS 9.8, published 3 Jun 2026) - [CVE-2026-36606: Mercusys AC12G hardcoded DES key in configuration backup](https://junglewise.ai/threats/cve-2026-36606-mercusys-ac12g-hardcoded-des-key-in-configuration-backup) (info, CVSS 7.4, published 3 Jun 2026) - [CVE-2026-36605: Mercusys AC12G HTTP denial of service in web management interface](https://junglewise.ai/threats/cve-2026-36605-mercusys-ac12g-http-denial-of-service-in-web-management-interface) (info, CVSS 7.5, published 3 Jun 2026) - [CVE-2026-36604: Mercusys AC12G DNS rebinding via missing Host header validation](https://junglewise.ai/threats/cve-2026-36604-mercusys-ac12g-dns-rebinding-via-missing-host-header-validation) (info, CVSS 6.5, published 3 Jun 2026) - [CVE-2026-36603: Mercusys AC12G missing authentication for UPnP IGD actions](https://junglewise.ai/threats/cve-2026-36603-mercusys-ac12g-missing-authentication-for-upnp-igd-actions) (info, CVSS 8.1, published 3 Jun 2026) - [CVE-2026-36602: Mercusys AC12G kernel memory disclosure in UPnP GetStatusInfo](https://junglewise.ai/threats/cve-2026-36602-mercusys-ac12g-kernel-memory-disclosure-in-upnp-getstatusinfo) (info, CVSS 5.3, published 3 Jun 2026) ## Most severe Mercusys vulnerabilities - [CVE-2026-36607: Mercusys AC12G brute-force protection bypass in TDDP endpoint](https://junglewise.ai/threats/cve-2026-36607-mercusys-ac12g-brute-force-protection-bypass-in-tddp-endpoint) (info, CVSS 9.8, published 3 Jun 2026) - [CVE-2026-36608: Mercusys AC12G UPnP port forwarding to local admin interface](https://junglewise.ai/threats/cve-2026-36608-mercusys-ac12g-upnp-port-forwarding-to-local-admin-interface) (info, CVSS 9.6, published 3 Jun 2026) - [CVE-2026-12495: Mercusys MB115-4G stack buffer overflow in http_gdpr_decrypt](https://junglewise.ai/threats/cve-2026-12495-mercusys-mb115-4g-stack-buffer-overflow-in-http-gdpr-decrypt) (info, CVSS 9.2, published 27 Jul 2026) - [CVE-2026-36603: Mercusys AC12G missing authentication for UPnP IGD actions](https://junglewise.ai/threats/cve-2026-36603-mercusys-ac12g-missing-authentication-for-upnp-igd-actions) (info, CVSS 8.1, published 3 Jun 2026) - [CVE-2026-36609: Mercusys AC12G V1 password recovery via static nonce and weak encoding](https://junglewise.ai/threats/cve-2026-36609-mercusys-ac12g-v1-password-recovery-via-static-nonce-and-weak) (info, CVSS 7.5, published 3 Jun 2026) - [CVE-2026-36605: Mercusys AC12G HTTP denial of service in web management interface](https://junglewise.ai/threats/cve-2026-36605-mercusys-ac12g-http-denial-of-service-in-web-management-interface) (info, CVSS 7.5, published 3 Jun 2026) - [CVE-2026-36606: Mercusys AC12G hardcoded DES key in configuration backup](https://junglewise.ai/threats/cve-2026-36606-mercusys-ac12g-hardcoded-des-key-in-configuration-backup) (info, CVSS 7.4, published 3 Jun 2026) - [CVE-2026-36612: Mercusys AC12G weak WPS lockout and predictable PIN](https://junglewise.ai/threats/cve-2026-36612-mercusys-ac12g-weak-wps-lockout-and-predictable-pin) (info, CVSS 6.5, published 3 Jun 2026) - [CVE-2026-36604: Mercusys AC12G DNS rebinding via missing Host header validation](https://junglewise.ai/threats/cve-2026-36604-mercusys-ac12g-dns-rebinding-via-missing-host-header-validation) (info, CVSS 6.5, published 3 Jun 2026) - [CVE-2026-36616: Mercusys AC12G hardcoded WiFi credentials in firmware](https://junglewise.ai/threats/cve-2026-36616-mercusys-ac12g-hardcoded-wifi-credentials-in-firmware) (info, CVSS 6.1, published 3 Jun 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 3 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 3 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Mercusys technologies - [Mercusys AC12G(EU) V1](https://junglewise.ai/threats/technologies/ac12g-eu-v1): 12 vulnerabilities - [Mercusys AC12G](https://junglewise.ai/threats/technologies/ac12g): 9 vulnerabilities - [Mercusys AC12 V2](https://junglewise.ai/threats/technologies/ac12-v2): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Mercusys vulnerabilities", https://junglewise.ai/threats/vendors/mercusys, 9 November 2026.