CVE-2026-49199 Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device

Description

Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Predator Connect W6x	Versions non publiées

Autres CVE de Predator Connect W6x

Les 5 CVE de Predator Connect W6x →

CVE-2026-49198 Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to… 8.3 Élevée CVE-2026-49197 Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block… 10.0 Critique CVE-2026-49196 The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary… 8.6 Élevée CVE-2026-49195 Unauthenticated Debug Service 8.7 Élevée