{"id":238301,"date":"2026-06-04T02:25:21","date_gmt":"2026-06-04T07:25:21","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/06\/acer-working-to-patch-max-severity-zero-days-in-wave-7-routers"},"modified":"2026-06-04T02:25:21","modified_gmt":"2026-06-04T07:25:21","slug":"acer-working-to-patch-max-severity-zero-days-in-wave-7-routers","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/06\/acer-working-to-patch-max-severity-zero-days-in-wave-7-routers","title":{"rendered":"Acer working to patch max severity zero-days in Wave 7 routers"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/acer-working-to-patch-max-severity-zero-days-in-wave-7-routers2.jpg\"><\/a><\/p>\n<p>Acer confirmed that it\u2019s working to address two maximum-severity zero-day vulnerabilities affecting its Wave 7 mesh routers.<\/p>\n<p>According to a <a href=\"https:\/\/community.acer.com\/en\/kb\/articles\/19673\" target=\"_blank\" rel=\"nofollow noopener\">Friday security advisory<\/a>, the two security flaws were reported by security researcher Gergo Pap and affect Wave 7 routers running firmware version T7c_GBL_1.01.000055 or earlier.<\/p>\n<p>The first zero-day, a broken access control vulnerability tracked as <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-49200\" target=\"_blank\" rel=\"nofollow noopener\">CVE-2026\u201349200<\/a>, can allow unauthenticated attackers to remotely access plaintext credentials stored in log archives.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Acer confirmed that it\u2019s working to address two maximum-severity zero-day vulnerabilities affecting its Wave 7 mesh routers. According to a Friday security advisory, the two security flaws were reported by security researcher Gergo Pap and affect Wave 7 routers running firmware version T7c_GBL_1.01.000055 or earlier. The first zero-day, a broken access control vulnerability tracked as [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1492],"tags":[],"class_list":["post-238301","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/238301","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=238301"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/238301\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=238301"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=238301"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=238301"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}