Paper/Archive/CVE-2026-49197

CVE-2026-49197

Acer Predator Connect W6x — Predator Connect W6x: Improper Authentication

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 26.4.264 × 205.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.

Affected

ProductAffectedFixed inSource

Predator Connect W6xW6x_GBL_2.00.000005 – *–CNA

Scores by source

Acer (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcommunity.acer.com/en/kb/articles/19672