CVE-2026-78860: n/a

CVE-2026-78860 describes a security flaw in Mercusys AC12 V2 where information is stored in plaintext, enabling a local attacker to execute arbitrary code. The vulnerability requires local access to the device and leverages the insecure storage mechanism to achieve code execution. No CVSS score or detailed technical exploitation methods are provided.

The impact is the potential for arbitrary code execution by a local attacker, which could lead to full compromise of the affected device. However, exploitation requires local access, limiting the attack surface to users or attackers with physical or authenticated access to the device.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to the device and monitor for unauthorized physical or network access.