CVE Catalog
CVE-2026-49197
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.33%
25th percentile - higher than 25% of all known CVEs
Summary
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.
Risk Assessment
An attacker can send malformed requests, potentially bypassing authentication and gaining unauthorized access to Acer Connect app features.
Recommendation
Update the Acer Connect software to the latest patched version and implement server-side validation of the Authorization header.
Original NVD description (English source)
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.