CVE-2026-36606

Vulnerability Description

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 encrypts configuration backups with a hardcoded DES key using single DES in ECB mode. An attacker who obtains a backup file can decrypt it to recover all stored credentials including admin password, WiFi PSK, and DDNS credentials.

Vulnerability Details

Published Date

June 03, 2026

Last Modified

June 03, 2026

Source

NVD

External References

https://github.com/Tymbark7372/MERCUSYS-AC12G/blob/master/advisories/CVE-2026-36606.md

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment