Skip to content

Product

acer wave 7 firmware vulnerabilities

2 published CVES affecting acer wave 7 firmware, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
2
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest acer wave 7 firmware CVEs

Newest publication first

  1. CVE-2026-49201 Acer Wave 7 router: Hardcoded Cryptographic Key

    Published
    CriticalCVSS 10.0 EPSS 0.26%

    The upload.cgi binary, responsible for processing device backups, contains a hardcoded AES encryption key. This allows an attacker to decrypt, modify, and re-encrypt system backups, facilitating persistent backdoor injection.

  2. CVE-2026-49200 Acer Wave 7 router: Broken Access Control

    Published
    CriticalCVSS 10.0 EPSS 0.52%

    The acer_cgi.log file in the device firmware is accessible without authentication via the web interface. This file contains cleartext login credentials (for web and Telnet), leading to unauthorized system access.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.