PT-2026-44765 · Mediatek · Mtk Dut

Rethesis · Published 2026-05-29 · Updated 2026-06-08 · CVE-2026-49195

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An unauthenticated debug service is exposed on TCP port 9000. This allows a LAN-based attacker to execute arbitrary UCC commands via the '/sbin/mtk dut' binary.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-49195

Affected Products

Mtk Dut

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-49195 · Security Note
• https://community.acer.com/en/kb/articles/19672 · Vendor Advisory
• https://t.me/CVEtracker/55233 · Telegram Post
• https://twitter.com/dailycve/status/2064002250674991546 · Twitter Post
• https://twitter.com/ADKCyber/status/2060512640385048746 · Twitter Post