Critical Vulnerabilities in Acer Wave 7 Routers (heise.de)

· 52d ago · Report · Spotlight this ·

0xBASE INTEL BRIEF

Two critical vulnerabilities (CVSS 10) in Acer Wave 7 routers
Unencrypted credentials exposed via log file
Tampered firmware can be uploaded via upload.cgi
No patch available; disconnect from internet recommended

"Two critical vulnerabilities (CVE-2026-49200, CVE-2026-49201) with CVSS 10.0 affect Acer Wave 7 routers. Attackers can extract unencrypted credentials from log files and upload modified firmware. A security patch is expected by end of June 2026. Until then, disconnection from the internet is advised."

#Router security #CVSS 10 #Firmware vulnerability

Read article on heise.de → | More from heise.de

Critical Vulnerabilities in Acer Wave 7 Routers (heise.de)

Discussion Matrix