CVE-2026-78862: n/a

CVE-2026-78862 describes a security flaw in the Mercusys AC12 V2 router where a local attacker with physical access to the UART serial interface on the printed circuit board can execute arbitrary code. This vulnerability arises from insufficient protection of the UART interface, which is typically used for debugging or device management. No CVSS score or detailed technical data is provided, and there is no information about patch availability or vendor advisories.

The impact is that an attacker with physical access to the device can execute arbitrary code, potentially leading to full control over the device. This could compromise the device's integrity and confidentiality. However, exploitation requires local physical access to the UART interface, limiting the attack vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict physical access to the device and its internal components to trusted personnel only.