Read the docs

Acer

Records76All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical21CVSS 9.0–10.0
CVSS high38CVSS 7.0–8.9

Exploited now

Acer records in CISA KEV

No Acer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Connect M6e 5g Firmware 26 records MEDIUM Ac700 Chromebook 7 records MEDIUM Predator Connect W6x Firmware 5 records MEDIUM Care Center 3 records LOW Lunchapp.aplunch 2 records MEDIUM Wave 7 Firmware 2 records MEDIUM Acer Portal 1 record LOW Altos T110 F3 Firmware 1 record HIGH

Records

2 records in Wave 7 Firmware · all components

TI-2026-36403 CVE-2026-49200 · GHSA-xf88-3pmx-m4vw

Acer Wave 7 router: Broken Access Control

Priority MEDIUM 49

The acer_cgi.log file in the device firmware is accessible without authentication via the web interface.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00518 Published 2026-05-29 No fix listed CWE-532
TI-2026-36404 CVE-2026-49201 · GHSA-5xrr-7q3m-rh98

Acer Wave 7 router: Hardcoded Cryptographic Key

Priority MEDIUM 48

The upload.cgi binary, responsible for processing device backups, contains a hardcoded AES encryption key.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00262 Published 2026-05-29 No fix listed CWE-798
Open these records in search →