10
/ 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Description
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.
AI Analysis
Improper authentication vulnerability in Predator Connect W6x due to improper validation of HTTP Authorization header
Basic Information
ID
CVE-2026-49197
Source
Acer
Published
May 29, 2026 at 08:24
Affected Product
Vendor
Acer
Product
Predator Connect W6x
Version
W6x_GBL_2.00.000005
Affected Versions
Acer Predator Connect W6x W6x_GBL_2.00.000005
CWE Classification
AI Assessment
AI Score
10 / 10
AI Severity
Critical
Vendor
Acer
Product
Predator Connect W6x
Version
W6x_GBL_2.00.000005