8.7
High
CVE-2026-49195 Unauthenticated Debug Service
Description
Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Predator Connect W6x | Versions not published |
Other CVEs of Predator Connect W6x
The 5 CVEs of Predator Connect W6x →
CVE-2026-49199
Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device
10.0
Critical
CVE-2026-49198
Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to…
8.3
High
CVE-2026-49197
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block…
10.0
Critical
CVE-2026-49196
The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary…
8.6
High