Veille CVE

Recherche « Acer Wave 7 router »

2 CVE

Critique 2 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Acer Wave 7 router » ✕
  1. CVE-2026-49201 9.8 Critique

    Acer Wave 7 router · Acer wave 7 firmware

    The upload.cgi binary, responsible for processing device backups, contains a hardcoded AES encryption key. This allows an attacker to decrypt, modify, and re-encrypt system backups, facilitating persistent backdoor injection.

  2. CVE-2026-49200 9.8 Critique

    Acer Wave 7 router · Acer wave 7 firmware

    The acer_cgi.log file in the device firmware is accessible without authentication via the web interface. This file contains cleartext login credentials (for web and Telnet), leading to unauthorized system access.