Improper Access Control Vulnerability in MQTT Broker by Acer

CVE-2026-49198

What is CVE-2026-49198?

A vulnerability in Acer's MQTT broker results from improper access control mechanisms, which allow wildcard topic subscriptions. This flaw exposes all MQTT traffic to unauthorized actors, posing a significant risk to the confidentiality and integrity of message data transmitted within the broker. Addressing this issue is critical to safeguarding sensitive information from potential threats and ensuring secure communication.

References