10.0
Critique
CVE-2026-49197 Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block…
Description
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Predator Connect W6x | Versions non publiées |
Autres CVE de Predator Connect W6x
Les 5 CVE de Predator Connect W6x →
CVE-2026-49199
Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device
10.0
Critique
CVE-2026-49198
Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to…
8.3
Élevée
CVE-2026-49196
The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary…
8.6
Élevée
CVE-2026-49195
Unauthenticated Debug Service
8.7
Élevée