CVE-2026-49200

Acer Wave 7 router: Broken Access Control PUBLISHED

Description (CNA)

The acer_cgi.log file in the device firmware is accessible without authentication via the web interface. This file contains cleartext login credentials (for web and Telnet), leading to unauthorized system access.

Affected (CNA)

Vendor / product	Versions
Acer / Wave 7 router	affected T7c_GBL_1.01.000055 through *

CWE

CWE-532

References

https://community.acer.com/en/kb/articles/19673

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.