CoreCVE
Back

MEDIUM

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized internal buffer contents when receiving HTTP POST requests to undefined paths, exposing server state to unauthenticated adjacent network attackers

Published Jun 3, 2026

Description

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized internal buffer contents when receiving HTTP POST requests to undefined paths, exposing server state to unauthenticated adjacent network attackers.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jun 3, 2026
Updated Jun 3, 2026
Reserved Apr 6, 2026
Link CVE-2026-36613
CISA Vulnrichment
Updated Jun 3, 2026
NVD
Status Deferred
Modified Jul 22, 2026
Link CVE-2026-36613
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-36613