Vulnerabilidades do Acer Predator Connect W6x
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Acer Predator Connect W6x: 5 registro(s), com versões afetadas e correções.
CVE-2026-49199
Crítica · 9.8
CWE-77 29/05/2026
Predator Connect W6x: RCE via MQTT
Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.
CVE-2026-49198
Média · 4.9
CWE-284 29/05/2026
Predator Connect W6x: MQTT Broker Access Control
Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors.
CVE-2026-49197
Crítica · 9.8
CWE-287 29/05/2026
Predator Connect W6x: Improper Authentication
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.
CVE-2026-49196
Alta · 7.2
CWE-77 29/05/2026
Predator Connect W6x: Web Interface Command Injection
The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands.
CVE-2026-49195
Alta · 8.8
CWE-306 29/05/2026
Predator Connect W6x: unauthenticated Debug Service
Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.