Known vulnerabilities in Acer Wave 7 router
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-49201 | The upload.cgi binary, responsible for processing device backups, contains a hardcoded AES encryption key | 10.0 Critical | May 29, 2026 |
| CVE-2026-49200 | The acer_cgi.log file in the device firmware is accessible without authentication via the web interface | 10.0 Critical | May 29, 2026 |