| Summary | Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized buffer when receiving POST requests without SOAPAction header on UPnP port 1900, exposing internal memory to unauthenticated adjacent network attackers. |
|---|---|
| Publication Date | June 4, 2026, 3:16 a.m. |
| Registration Date | June 4, 2026, 4:16 a.m. |
| Last Update | June 4, 2026, 3:16 a.m. |