VULNERABILITY INTELLIGENCE

CVE-2026-49200

CVSS score9.8 CRITICAL
EPSS probability0.52%
CISA KEVNot currently listed
Published2026-05-29
Last modified2026-07-21
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The acer_cgi.log file in the device firmware is accessible without authentication via the web interface. This file contains cleartext login credentials (for web and Telnet), leading to unauthorized system access.

Weakness classification

  • 8fc372e3-d9c5-46e4-9410-38469745c639: CWE-532

Primary references