Aller au contenu
Se connecter
10.0 Critique

CVE-2026-49200 The acer_cgi.log file in the device firmware is accessible without authentication via the web interface

Description

The acer_cgi.log file in the device firmware is accessible without authentication via the web interface. This file contains cleartext login credentials (for web and Telnet), leading to unauthorized system access.

Produits et versions touchés

Produit Versions touchées Corrigé en
Wave 7 router Versions non publiées

Autres CVE de Wave 7 router

Les 2 CVE de Wave 7 router →
CVE-2026-49201 The upload.cgi binary, responsible for processing device backups, contains a hardcoded AES encryption key 10.0 Critique
Suivre cette CVE