PT-2026-45991 · Mercusys · Ac12G

Tymbark7372 · CVE-2026-36603 · Published 2026-06-03 · Updated 2026-06-05

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Mercusys AC12G (EU) V1 version AC12G(EU) V1 200909

Description The device exposes 15 of 18 UPnP IGD actions without authentication on port 1900, including AddPortMapping and GetExternalIPAddress. Universal Plug and Play (UPnP), a protocol that allows devices to discover each other and establish communication services on a network, is enabled by default. This allows any unauthenticated device on the local area network (LAN) to create arbitrary port forwarding rules and access WAN traffic statistics.

Recommendations Disable UPnP through the admin interface for version AC12G(EU) V1 200909.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-36603

Affected Products

Ac12G

References · 3

• 🔥 https://github.com/Tymbark7372/MERCUSYS-AC12G/blob/master/advisories/CVE-2026-36603.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-36603 · Security Note
• https://t.me/cveNotify/166128 · Telegram Post