Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-49201

Acer Wave 7 router: Hardcoded Cryptographic Key

The upload.cgi binary, responsible for processing device backups, contains a hardcoded AES encryption key. This allows an attacker to decrypt, modify, and re-encrypt system backups, facilitating persistent backdoor injection.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Acer
Products
Wave 7 Wave 7 Firmware Wave 7 Router
CVE-2026-49200

Acer Wave 7 router: Broken Access Control

The acer_cgi.log file in the device firmware is accessible without authentication via the web interface. This file contains cleartext login credentials (for web and Telnet), leading to unauthorized system access.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Acer
Products
Wave 7 Wave 7 Firmware Wave 7 Router