critical9.8
CVE-2026-49197
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.
Impact
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acer | Predator Connect W6x Firmware | through w6x_gbl_2.00.000005 |