Vulnerability Details CVE-2026-49195
Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.7%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2026-49195
-
cpe:2.3:h:acer:predator_connect_w6x:-
-
cpe:2.3:o:acer:predator_connect_w6x_firmware:w6x_gbl_2.00.000005