Skip to content
Acer Addresses Critical Zero-Day Vulnerabilities in Wave 7 Routers

Acer Addresses Critical Zero-Day Vulnerabilities in Wave 7 Routers

First seen 4 Jun 2026, 07:24 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 5, 2026 at 07:11 UTC
  • •Two critical zero-day vulnerabilities (CVE-2026-49200 and CVE-2026-49201) affect Acer's Wave 7 routers.
  • •The vulnerabilities allow unauthorized access to plaintext credentials and persistent backdoor access.
  • •Acer plans to release patches by the end of June 2026; users should restrict remote access in the meantime.

Acer is working to patch two critical zero-day vulnerabilities affecting its Wave 7 mesh routers. The vulnerabilities, reported by researcher Gergo Pap, impact firmware version T7c_GBL_1.01.000055 and earlier. CVE-2026-49200 allows unauthenticated attackers to access plaintext credentials stored in log archives, while CVE-2026-49201 involves a hardcoded cryptographic key that enables persistent backdoor access. Acer plans to release firmware updates to address these issues by the end of June 2026. Until patches are available, users are advised to disable remote management or restrict access to trusted IP addresses. The vulnerabilities pose a significant risk due to their potential for remote exploitation without authentication.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 98d ago How this analysis works

Timeline

2026-05-29
CVE-2026-49200 and CVE-2026-49201 published
Two critical zero-day vulnerabilities affecting Acer Wave 7 routers were disclosed, allowing unauthorized access and persistent backdoor access.
Bleepingcomputer
2026-06-03
Acer confirms active work on patches
Acer announced it is actively working on firmware updates to address the reported vulnerabilities, expected by the end of June 2026.
Bleepingcomputer
2026-06-04
Scworld reports on Acer's vulnerabilities
Scworld published a brief confirming Acer's acknowledgment of the vulnerabilities and the planned patch timeline.
Scworld
2026-06-04
Cybersecuritynews covers Acer's response
Cybersecuritynews reported on Acer's preparations for a firmware update to address the critical vulnerabilities.
Cybersecuritynews

More articles in this cluster (5)

Following this threat?

Track Acer and CVE-2026-49200 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 3