The Acer Predator Connect W6x device contains a command injection vulnerability (CWE-77) in its Wi-Fi device blocking feature. Specifically, the input for MAC addresses is not sanitized, enabling an attacker with high privileges to execute arbitrary shell commands on the device. This vulnerability affects version W6x_GBL_2.00.000005 and has a CVSS 4.0 score of 8.6, reflecting a high severity due to network attack vector, low attack complexity, and no user interaction required. The vulnerability is published and assigned CVE-2026-49196 but currently lacks an official remediation or patch from Acer.

Successful exploitation allows an attacker with high privileges to execute arbitrary shell commands on the affected device, potentially leading to full compromise of the device. Given the network attack vector and lack of required user interaction, this could facilitate unauthorized control over the device's Wi-Fi blocking functionality and broader system compromise. No known exploits are reported in the wild as of the publication date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the device management interfaces to trusted administrators only, and monitor for any unusual activity related to Wi-Fi device blocking features. Avoid using the vulnerable version W6x_GBL_2.00.000005 if possible.