high8.8
CVE-2026-49195
Unauthenticated Debug Service.
Impact
Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acer | Predator Connect W6x Firmware | through w6x_gbl_2.00.000005 |