TI-2026-36402 CVE-2026-49199 · GHSA-2456-wh5h-jwph
Predator Connect W6x: RCE via MQTT
Priority MEDIUM 52
Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.
Acer
Records76All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical21CVSS 9.0–10.0
CVSS high38CVSS 7.0–8.9
Exploited now
Acer records in CISA KEVNo Acer vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Predator Connect W6x Firmware · all components
TI-2026-36400 CVE-2026-49197 · GHSA-6pmc-5frg-fmg6
Predator Connect W6x: Improper Authentication
Priority MEDIUM 49
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.
TI-2026-36399 CVE-2026-49196 · GHSA-68jv-x4hh-mmjq
Predator Connect W6x: Web Interface Command Injection
Priority LOW 39
The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands.
TI-2026-36398 CVE-2026-49195 · GHSA-2vr8-wh6w-3q8m
Predator Connect W6x: unauthenticated Debug Service
Priority LOW 39
Unauthenticated Debug Service.
TI-2026-36401 CVE-2026-49198 · GHSA-jwxj-jjcm-8p4w
Predator Connect W6x: MQTT Broker Access Control
Priority LOW 35
Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors.