CVE-2026-12562

Name of the Vulnerable Software and Affected Versions RCU II+ (affected versions not specified) Multiload II+ (affected versions not specified)

Description An unauthenticated service exposes a debug interface that grants full root-level access to the embedded system. This issue is caused by a network-accessible port running a Target Communications Framework (TCF) service—a tool used for debugging and controlling embedded targets—that does not require authentication. This allows an attacker to interact directly with the underlying Linux environment to view and modify the filesystem, manipulate running processes, and control network interfaces.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.