50
CVEs
15
Critical
26
High
0
KEV
4
PoC
40
Unpatched C/H
2.0%
Patch Rate
0.2%
Avg EPSS
Severity Breakdown
CRITICAL
15
HIGH
26
MEDIUM
9
LOW
0
Monthly CVE Trend
Affected Products (30)
Connect M6E 5G Portable Wifi Router
26
Predator Connect W6X
5
Cr 48 Chromebook
3
Series 5 Chromebook
3
Ac700 Chromebook
3
Chrome Os
3
Chrome
3
Wave 7 Router
2
Care Center
2
Nitrorsense V3
2
Veriton X6620G Firmware
1
Aspire 1602M Firmware
1
Predatorsense V3
1
Extensa Ex215 21G Firmware
1
Veriton E430 Firmware
1
Aspire Z3 615 Firmware
1
Series 5 550 Chromebook
1
Ap130 F2 Firmware
1
Aspire Xc600 Firmware
1
Veriton M2611G Firmware
1
Veriton N2620G Firmware
1
Veriton X4620G Firmware
1
Altos W2000H W570H F4 Firmware
1
Aspire Xc100 Firmware
1
Aspire A115 21 Firmware
1
Chromebox 3
1
Veriton M4620 Firmware
1
Aspire Tc 120 Firmware
1
Veriton M2611 Firmware
1
Veriton S6620G Firmware
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2022-41415 | Acer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the RevserveMem component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 1.3% | 70 |
PoC
No patch
|
| CVE-2022-30426 | There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.8 | 0.4% | 59 |
PoC
No patch
|
| CVE-2019-18670 | In the Quick Access Service (QAAdminAgent.exe) in Acer Quick Access V2.01.3000 through 2.01.3027 and V3.00.3000 through V3.00.3008, a REGULAR user can load an arbitrary unsigned DLL into the signed. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available. | HIGH | 7.8 | 0.8% | 59 |
PoC
|
| CVE-2026-49199 | Remote unauthenticated command injection in the Acer Predator Connect W6x router enables root-level code execution via crafted MQTT messages, scoring a maximum 10.0 CVSS v4.0 across all impact metrics including subsequent system impact. The flaw was disclosed by Acer and tracked in the ENISA EUVD as EUVD-2026-33269, but no public exploit identified at time of analysis. Affects firmware W6x_GBL_2.00.000005 and earlier, with no special authentication or user interaction required. | CRITICAL | 10.0 | 0.7% | 51 |
No patch
|
| CVE-2012-0695 | Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.27 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available. | CRITICAL | 10.0 | 0.2% | 50 |
No patch
|
| CVE-2012-1418 | Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.60 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available. | CRITICAL | 10.0 | 0.2% | 50 |
No patch
|
| CVE-2012-3290 | Multiple unspecified vulnerabilities in Google Chrome before 20.0.1132.22 on the Acer AC700; Samsung Series 5, 5 550, and Chromebox 3; and Cr-48 Chromebook platforms have unknown impact and attack. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available. | CRITICAL | 10.0 | 0.2% | 50 |
No patch
|
| CVE-2026-49200 | Credential disclosure in the Acer Wave 7 router (firmware T7c_GBL_1.01.000055 and earlier) exposes the acer_cgi.log file over the web interface without authentication, leaking cleartext web and Telnet login credentials to any network-reachable attacker. With CVSS 4.0 of 10.0 and a vector indicating no privileges or user interaction, exploitation enables full device takeover; no public exploit identified at time of analysis, but the trivial nature of fetching a log file makes weaponization straightforward. | CRITICAL | 10.0 | 0.1% | 50 |
No patch
|
| CVE-2026-49185 | Unauthenticated remote command injection in Acer Connect M6E 5G Portable WiFi Router (firmware ≤ M6E_AI_1.00.000019) allows attackers to inject OS commands via the FieldX MDM adb messaging topic, which forwards unverified payloads to Runtime.exec(). The CVSS 4.0 score of 10.0 with network attack vector and no authentication required indicates a critical, trivially exploitable flaw; no public exploit identified at time of analysis but the simplicity of the bug pattern makes weaponization straightforward. | CRITICAL | 10.0 | 0.0% | 50 |
No patch
|
| CVE-2026-49197 | Authentication bypass in Acer Predator Connect W6x routers (firmware W6x_GBL_2.00.000005 and earlier) allows remote unauthenticated attackers to reach app-facing web endpoints by sending an HTTP Authorization header whose Base64 payload is intentionally malformed, because the endpoint treats a decoding failure as a pass rather than a rejection. The CVSS 4.0 score of 10.0 (AV:N/AC:L/PR:N/UI:N with high confidentiality, integrity, availability impact on both vulnerable and subsequent systems) reflects full takeover potential against an internet-reachable consumer/SOHO router, though no public exploit identified at time of analysis. | CRITICAL | 10.0 | 0.0% | 50 |
No patch
|
| CVE-2026-49201 | Hardcoded AES encryption key in the upload.cgi binary of the Acer Wave 7 router (firmware T7c_GBL_1.01.000055 and earlier) allows remote unauthenticated attackers to decrypt, tamper with, and re-encrypt device backup files, enabling persistent backdoor injection on affected devices. The CVSS 4.0 score of 10.0 reflects full compromise of confidentiality, integrity, and availability across both the vulnerable component and downstream subsequent systems. No public exploit identified at time of analysis, and CISA SSVC reports exploitation status as 'none', though the issue is flagged as automatable with total technical impact. | CRITICAL | 10.0 | 0.0% | 50 |
No patch
|
| CVE-2016-5648 | Acer Portal app before 3.9.4.2000 for Android does not properly validate SSL certificates, which allows remote attackers to perform a Man-in-the-middle attack via a crafted SSL certificate. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available. | MEDIUM | 5.3 | 1.3% | 48 |
PoC
No patch
|
| CVE-2026-49190 | Command injection in the Acer Connect M6E 5G Portable WiFi Router allows authenticated remote attackers to install arbitrary applications or execute operating system commands by abusing internal operation codes (opcodes) whose permission checks are not properly enforced. The flaw carries a CVSS 4.0 score of 9.4 (Critical) due to network reach, low attack complexity, and scope-changing impact on confidentiality, integrity, and availability. No public exploit identified at time of analysis and the CVE is not currently listed in CISA KEV. | CRITICAL | 9.4 | 0.1% | 47 |
No patch
|
| CVE-2026-49194 | Authentication bypass in the Acer Connect M6E 5G Portable WiFi Router allows low-privileged remote attackers to reach a debug routine (SCREEN_CLICK opcode 5053) that skips the device login prompt and drops the caller directly into an interactive shell. CVSS 4.0 rates the issue 9.4 with scope change and high impact on confidentiality, integrity, and availability of both the router and connected subsystems; no public exploit identified at time of analysis. | CRITICAL | 9.4 | 0.0% | 47 |
No patch
|
| CVE-2026-49191 | Authentication bypass in the Acer Connect M6E 5G Portable WiFi Router's M3WebServer production build exposes hard-coded backend API keys through verbose error pages, enabling remote unauthenticated attackers to harvest credentials and gain full administrative control over the device. CVSS 4.0 scores this 9.3 (Critical) with no privileges or user interaction required, though no public exploit has been identified at time of analysis. | CRITICAL | 9.3 | 0.0% | 47 |
No patch
|