Security Advisory

CVE-2026-49195

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-29 08:02:48

Last updated 2026-05-29 15:00:39

Assigner Acer

CVSS score 8.7

State PUBLISHED

Description

Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.

← Browse all CVEs View on cve.org ↗