Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Acer Component: Predator Connect W6x Firmware Clear all filters
TI-2026-36402 CVE-2026-49199 · GHSA-2456-wh5h-jwph

Predator Connect W6x: RCE via MQTT

Priority MEDIUM 52

Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01338 Published 2026-05-29 No fix listed CWE-77
TI-2026-36401 CVE-2026-49198 · GHSA-jwxj-jjcm-8p4w

Predator Connect W6x: MQTT Broker Access Control

Priority LOW 35

Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00208 Published 2026-05-29 No fix listed CWE-284
TI-2026-36400 CVE-2026-49197 · GHSA-6pmc-5frg-fmg6

Predator Connect W6x: Improper Authentication

Priority MEDIUM 49

Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00332 Published 2026-05-29 No fix listed CWE-287
TI-2026-36399 CVE-2026-49196 · GHSA-68jv-x4hh-mmjq

Predator Connect W6x: Web Interface Command Injection

Priority LOW 39

The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.0037 Published 2026-05-29 No fix listed CWE-77