8.6
High
CVE-2026-49196 The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary…
Description
The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Predator Connect W6x | Versions not published |
Other CVEs of Predator Connect W6x
The 5 CVEs of Predator Connect W6x →
CVE-2026-49199
Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device
10.0
Critical
CVE-2026-49198
Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to…
8.3
High
CVE-2026-49197
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block…
10.0
Critical
CVE-2026-49195
Unauthenticated Debug Service
8.7
High