VYPR

device firmware

by Acer

CVEs (1)

  • CVE-2026-49200CriMay 29, 2026
    risk 0.64cvss 9.8epss 0.00

    The acer_cgi.log file in the device firmware is accessible without authentication via the web interface. This file contains cleartext login credentials (for web and Telnet), leading to unauthorized system access.