CVE-2026-49197

Description

Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.

References

• https://community.acer.com/en/kb/articles/19672