PT-2026-44767 · Acer · Acer Connect

Rethesis · Published 2026-05-29 · Updated 2026-06-06 · CVE-2026-49197

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Acer Connect (affected versions not specified)

Description Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header. The system fails to block requests when the Base64 decoding process fails, allowing potentially unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-49197

Affected Products

Acer Connect

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-49197 · Security Note
• https://community.acer.com/en/kb/articles/19672 · Vendor Advisory
• https://twitter.com/ADKCyber/status/2060512536391561569 · Twitter Post
• https://twitter.com/SecAlertsCo/status/2061109455094214719 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2060315225111380345 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1tyd7ek/top_10_trending_cves_06062026 · Reddit Post
• https://t.me/CVEtracker/55235 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1twj67x/top_10_trending_cves_04062026 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1txgk51/top_10_trending_cves_05062026 · Reddit Post