CVE-2026-49195

Description

Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.

References

• https://community.acer.com/en/kb/articles/19672