CVE-2026-36609 in AC12G
要約
〜によって MITRE • 2026年06月03日
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP. Combined with the predictable XOR-based password encoding (securityEncode function), this allows an attacker to reverse captured authentication tokens to recover the plaintext password.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.