10.0 CriticalCWE-287
CVE-2026-49197
Predator Connect W6x: Improper Authentication
AcerPredator Connect W6x
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
0.3%probability of exploitation in the next 30 days
Higher than 26% of scored CVEs
SeverityCVSS
10.0Critical
Description NVD
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.
Coverage 1 article · 1 outlet
- Dual CVSS 10.0 Bugs Fixed in Emergency Acer Router PatchSecurityOnline · first in our coverage