Unauthenticated Debug Service in Acer Products
CVE-2026-49195

8.7HIGH

Key Information:

Vendor

Acer

Status
Predator Connect W6x
Vendor
CVE Published:
29 May 2026

What is CVE-2026-49195?

A security flaw in Acer devices exposes the /sbin/mtk_dut binary over TCP port 9000 without authentication. This allows any attacker within the local area network (LAN) to exploit the service and execute arbitrary UCC commands, potentially leading to unauthorized access and control over the affected devices.

Affected Version(s)

Predator Connect W6x Windows W6x_GBL_2.00.000005

References

https://community.acer.com/en/kb/articles/19672

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

rethesis
.