Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3027▼ 69 respecto a la semana anterior
Críticas / altas1424▲ 58 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
–

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaCrítica (10)2.2%—Acer Predator Connect W6X Firmware29/5/202621/7/2026
Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.
AnalizadaAlta (8.3)0.34%—Acer Predator Connect W6X Firmware29/5/202621/7/2026
Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors.
AnalizadaCrítica (10)0.53%—Acer Predator Connect W6X Firmware29/5/202621/7/2026
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.
AnalizadaAlta (8.6)0.66%—Acer Predator Connect W6X Firmware29/5/202621/7/2026
The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands.
AnalizadaAlta (8.7)0.37%—Acer Predator Connect W6X Firmware29/5/202621/7/2026
Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.