10.0 CriticalCWE-532
CVE-2026-49200
Acer Wave 7 router: Broken Access Control
AcerWave 7 router
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
0.5%probability of exploitation in the next 30 days
Higher than 44% of scored CVEs
SeverityCVSS
10.0Critical
Description NVD
The acer_cgi.log file in the device firmware is accessible without authentication via the web interface. This file contains cleartext login credentials (for web and Telnet), leading to unauthorized system access.
Coverage 1 article · 1 outlet
- Critical flaws in Acer Wave 7 leak credentials, enable backdoorsSecurityOnline · first in our coverage