Veille CVE

Recherche « Acer Predator Connect W6x »

5 CVE

Critique 2 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Acer Predator Connect W6x » ✕
  1. CVE-2026-49199 9.8 Critique

    Acer Predator Connect W6x · Acer predator connect w6x firmware

    Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.

  2. CVE-2026-49198 4.9 Moyenne

    Acer Predator Connect W6x · Acer predator connect w6x firmware

    Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors.

  3. CVE-2026-49197 9.8 Critique

    Acer Predator Connect W6x · Acer predator connect w6x firmware

    Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.

  4. CVE-2026-49196 7.2 Élevée

    Acer Predator Connect W6x · Acer predator connect w6x firmware

    The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands.

  5. CVE-2026-49195 8.8 Élevée

    Acer Predator Connect W6x · Acer predator connect w6x firmware

    Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.