PT-2026-44770

CVE-2026-49200

·

Published

2026-05-29

·

Updated

2026-07-21

Description by

CVSS 4.0
10
Critical
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions Acer Wave 7 router (affected versions not specified)
Description The acer cgi.log file in the device firmware is accessible without authentication via the web interface. This file contains cleartext login credentials for both web and Telnet interfaces, which can lead to unauthorized system access and full system compromise.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-532: Insertion of Sensitive Information into Log File
Related identifiers
CVE-2026-49200
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com