CVE-2026-49197: Predator Connect W6x: Improper Authentication
Published May 29, 2026
·Updated
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.
Affected Software
3 affected components
Acer Predator Connect W6x
All of the following
Acer Predator Connect W6x Firmware<=w6x_gbl_2.00.000005
Acer Predator Connect W6x
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in W6x_GBL_2.00.000008
Event History
May 29, 2026
CVE Published
via MITRE·08:24 AM
Data Sourced
via MITRE·08:24 AM
RemedyDescriptionWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-49197?
CVE-2026-49197 has a critical severity rating of 10.
2
How do I fix CVE-2026-49197?
To fix CVE-2026-49197, update to firmware version W6x_GBL_2.00.000008.
3
What type of vulnerability is CVE-2026-49197?
CVE-2026-49197 is categorized as an Improper Authentication vulnerability.
4
Which product is affected by CVE-2026-49197?
CVE-2026-49197 affects the Acer Predator Connect W6x.
5
What is the impact of CVE-2026-49197 on the Acer Predator Connect W6x?
CVE-2026-49197 allows unauthorized requests due to improper validation of the HTTP Authorization header.