Deviceways

Router

Acer Predator Connect W6x

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.

Release listed · 25.12.6

Get OpenWrt firmwarefirmware-selector.openwrt.org
Original project github.comInstallation guide openwrt.org
First installation
Serial
Sources

Features & details

Check the project and hardware shown for each feature.

OpenWrt

OpenWrt — Source documentation (openwrt.org)

Installation routes recorded
Serial
Recovery routes recorded
TFTP generic, Serial

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 10.0 (v4.0)

Predator Connect W6x

Predator Connect W6x: RCE via MQTT

CVE-2026-49199

Affected firmware
W6x_GBL_2.00.000005 onward in the named source scope
Fix
Fixed on firmware version: W6x_GBL_2.00.000008
Read Acer CVE record
Details and sources
CVE updated

Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.

CVE published

CVSS 10.0 (v4.0)

Predator Connect W6x

Predator Connect W6x: Improper Authentication

CVE-2026-49197

Affected firmware
W6x_GBL_2.00.000005 onward in the named source scope
Fix
Fixed on firmware version: W6x_GBL_2.00.000008.
Read Acer CVE record
Details and sources
CVE updated

Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.

CVE published

CVSS 8.7 (v4.0)

Predator Connect W6x

Predator Connect W6x: unauthenticated Debug Service

CVE-2026-49195

Affected firmware
W6x_GBL_2.00.000005 onward in the named source scope
Fix
Fixed on firmware version: W6x_GBL_2.00.000008
Read Acer CVE record
Details and sources
CVE updated

Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands.

CVE published

CVSS 8.6 (v4.0)

Predator Connect W6x

Predator Connect W6x: Web Interface Command Injection

CVE-2026-49196

Affected firmware
W6x_GBL_2.00.000005 onward in the named source scope
Fix
Fixed on firmware version: W6x_GBL_2.00.000008.
Read Acer CVE record
Details and sources
CVE updated

The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands.

CVE published

CVSS 8.3 (v4.0)

Predator Connect W6x

Predator Connect W6x: MQTT Broker Access Control

CVE-2026-49198

Affected firmware
W6x_GBL_2.00.000005 onward in the named source scope
Fix
Fixed on firmware version: W6x_GBL_2.00.000008
Read Acer CVE record
Details and sources
CVE updated

Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors.

Check more security advisories for this device · CVE.org