Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-49197 EUVD-2026-33264GHSA-6pmc-5frg-fmg6

Predator Connect W6x: Improper Authentication

Published May 29, 2026 · Updated May 29, 2026 · Assigned by Acer

Description

Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.

Affected products

VendorProductAffectedFixed
Acer Predator Connect W6x W6x_GBL_2.00.000005 —

References