8.7
Élevée
CVE-2026-49195 Unauthenticated Debug Service
Description
Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Predator Connect W6x | Versions non publiées |
Autres CVE de Predator Connect W6x
Les 5 CVE de Predator Connect W6x →
CVE-2026-49199
Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device
10.0
Critique
CVE-2026-49198
Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to…
8.3
Élevée
CVE-2026-49197
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block…
10.0
Critique
CVE-2026-49196
The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary…
8.6
Élevée