Acer Predator Connect W6X vulnerabilities
5 vulnerabilities
Known vulnerabilities in Acer Predator Connect W6X, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-49197acerpredator_connect_w6x_firmware
EPSS score0.53%
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.CVE-2026-49196acerpredator_connect_w6x_firmwareEPSS score0.66%
The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands.CVE-2026-49199acerpredator_connect_w6x_firmwareEPSS score2.16%
Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.CVE-2026-49195acerpredator_connect_w6x_firmwareEPSS score0.37%
Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.CVE-2026-49198acerpredator_connect_w6x_firmwareEPSS score0.34%
Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors.