CVE-2026-36606

The Mercusys AC12G (EU) V1 router, running firmware AC12G(EU)_V1_200909 , is vulnerable to a credential exposure flaw. The device uses a hardcoded DES key with single DES in ECB mode to encrypt configuration backups. If an attacker obtains a backup file, they can decrypt it to recover sensitive c...