Dual CVSS 10.0 Bugs Fixed in Emergency Acer Router Patch
ID: adacae52-0fa8-5d5a-a1c9-3a10c9da5df3
STIX ID: report--adacae52-0fa8-5d5a-a1c9-3a10c9da5df3
Feed Name: securityonline.info
Threat Score
Acer has issued an urgent firmware update for Connect W6x routers to address multiple critical vulnerabilities — including an authentication bypass (CVE-2026-49197) and an MQTT command injection (CVE-2026-49199) — both rated CVSS 10.0, plus several other high-severity fixes; administrators are instructed to update to firmware W6x_GBL_2.00.000008 or later and follow the provided update steps to mitigate remote takeover and code execution risks.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.