CVE-2026-49198 Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to…

Description

Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Predator Connect W6x	Versions non publiées

Autres CVE de Predator Connect W6x

Les 5 CVE de Predator Connect W6x →

CVE-2026-49199 Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device 10.0 Critique CVE-2026-49197 Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block… 10.0 Critique CVE-2026-49196 The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary… 8.6 Élevée CVE-2026-49195 Unauthenticated Debug Service 8.7 Élevée