Security Advisory

CVE-2026-49200

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-29 08:51:15

Last updated 2026-05-29 10:54:23

Assigner Acer

CVSS score 10.0

State PUBLISHED

Description

The acer_cgi.log file in the device firmware is accessible without authentication via the web interface. This file contains cleartext login credentials (for web and Telnet), leading to unauthorized system access.

← Browse all CVEs View on cve.org ↗