Skip to content
OpenAdvisories
High · 8.7 CVE-2026-49195 EUVD-2026-33261GHSA-2vr8-wh6w-3q8m

Predator Connect W6x: unauthenticated Debug Service

Published May 29, 2026 · Updated May 29, 2026 · Assigned by Acer

Description

Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.

Affected products

VendorProductAffectedFixed
Acer Predator Connect W6x W6x_GBL_2.00.000005 —

References