CVE-2026-49195

Predator Connect W6x: unauthenticated Debug Service PUBLISHED

Description (CNA)

Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.

Affected (CNA)

Vendor / product	Versions
Acer / Predator Connect W6x	affected W6x_GBL_2.00.000005 through *

CWE

CWE-306

References

https://community.acer.com/en/kb/articles/19672

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.