Predator Connect W6x Firmware vulnerabilities

2 known vulnerabilities in Predator Connect W6x Firmware from Acer. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Predator Connect W6x: Improper Authentication

  CVE-2026-49197May 29, 2026Acer

  Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.

• 8.8 High severity

  Predator Connect W6x: Missing Authentication for Critical Functionality

  CVE-2026-49195May 29, 2026Acer

  Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.