CVE-2026-49199 Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device

Description

Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.

Affected products and versions

Product	Affected versions	Fixed in
Predator Connect W6x	Versions not published

Other CVEs of Predator Connect W6x

The 5 CVEs of Predator Connect W6x →

CVE-2026-49198 Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to… 8.3 High CVE-2026-49197 Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block… 10.0 Critical CVE-2026-49196 The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary… 8.6 High CVE-2026-49195 Unauthenticated Debug Service 8.7 High