← Database
CVE-2026-49197
CRITICAL
CVSS: 9.8
Published: 2026-05-29
Modified: 2026-07-21
Description
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.
Affected Platforms
Acer Predator Connect W6XAcer Predator Connect W6X Firmware