CVE-2026-36618 in AC12G

Summary

by MITRE • 06/03/2026

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version (unbound 1.22.0), aiding targeted attacks against known vulnerabilities.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsible: MITRE
• Reservation: 04/06/2026
• Disclosure: 06/03/2026
• Moderation: accepted
• Entry: VDB-368180
• CPE: ready
• CWE: CWE-200 (confirmed)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-36618
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36618
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-36618/