Vendor
Acer
75 known vulnerabilities in products by Acer, 0 of them actively exploited (CISA KEV).
Key figures
75
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
16
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-49199 | Predator Connect W6x: RCE via MQTT | 9.8 | |
| Critical | CVE-2022-41415 | Acer Altos W2000h-w570h F4 Firmware: Denial of Service | 9.8 | |
| High | CVE-2026-50206 | VPN Command Injection Vulnerability | 6.8 | |
| Critical | CVE-2026-49200 | Acer Wave 7 router: Broken Access Control | 9.8 | |
| High | CVE-2025-5491 | Acer ControlCenter - Remote Code Execution | 8.8 | |
| Critical | CVE-2026-49185 | Instruction Injection via FieldX MDM | 9.8 | |
| Critical | CVE-2026-49190 | Missing Per-Instruction Authorization Checks | 8.8 | |
| Not rated | CVE-2006-6121 | Acer Lunchapp.aplunch: security vulnerability | — | |
| Critical | CVE-2026-49197 | Predator Connect W6x: Improper Authentication | 9.8 | |
| Critical | CVE-2026-49186 | Lack of MQTT Broker Topic Access Control Lists | 9.8 | |
| Critical | CVE-2026-49188 | Elevated Root Command Execution via ai_cmd Sockets | 9.8 | |
| Critical | CVE-2026-49191 | Exposed Hard-coded M3WebServer Backend API Key | 9.8 | |
| Critical | CVE-2026-50211 | Exposed Factory Testing App Boundaries | 9.8 | |
| Critical | CVE-2026-49201 | Acer Wave 7 router: Hardcoded Cryptographic Key | 9.8 | |
| High | CVE-2026-49196 | Predator Connect W6x: Web Interface Command Injection | 7.2 | |
| Critical | CVE-2026-50214 | Shared Secret Quota Inflation | 9.8 | |
| Not rated | CVE-2009-2627 | Acer Lunchapp.aplunch: security vulnerability | — | |
| Critical | CVE-2026-49194 | SCREEN_CLICK Authentication Bypass | 8.8 | |
| Medium | CVE-2026-50601 | Planet9 Hardcoded Credentials Vulnerability Information | — | |
| Critical | CVE-2026-50225 | Account Creation Exhaustion | 9.1 | |
| Critical | CVE-2026-50208 | Permissive TrustAllCerts TLS Verification | 9.4 | |
| High | CVE-2019-18670 | Acer Quick Access: security vulnerability | 7.8 | |
| Critical | CVE-2026-50209 | MDM Server Registration Overriding | 7.8 | |
| High | CVE-2026-49202 | Unverified Meeting Recording Endpoints & Permissive CORS | 8.6 | |
| High | CVE-2026-50609 | Unauthorized Registry Modification Vulnerability in NitroSense and PredatorSense Software | — |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,
- Acer Routers Await Patches for Maximum-Severity Flawssans-newsbites-mail,