| CVE-2026-49199 |
Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device
|
10.0
Critical
|
May 29, 2026 |
| CVE-2026-49198 |
Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to…
|
8.3
High
|
May 29, 2026 |
| CVE-2026-49197 |
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block…
|
10.0
Critical
|
May 29, 2026 |
| CVE-2026-49196 |
The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary…
|
8.6
High
|
May 29, 2026 |
| CVE-2026-49195 |
Unauthenticated Debug Service
|
8.7
High
|
May 29, 2026 |