CVE-2026-49200

Description

The acer_cgi.log file in the device firmware is accessible without authentication via the web interface. This file contains cleartext login credentials (for web and Telnet), leading to unauthorized system access.

References

• https://community.acer.com/en/kb/articles/19673