Acer Connect M6E 5G vulnerabilities
26 vulnerabilities
Known vulnerabilities in Acer Connect M6E 5G, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-49186acerconnect_m6e_5g_firmware+1
EPSS score0.47%
The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). This allows any client to subscribe using wildcard characters (# or +) to enumerate hidden network devices or publish rogue control commands.CVE-2026-49193acerconnect_m6e_5g_firmware+1EPSS score0.42%
Overly permissive configuration settings on cloud storage containers expose active telemetry information publicly to the internet.CVE-2026-49188acerconnect_m6e_5g_firmware+1EPSS score0.63%
The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), paving the way for unauthenticated users to execute arbitrary root commands.CVE-2026-49185acerconnect_m6e_5g_firmware+1EPSS score0.56%
The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/instruction injection.CVE-2026-49187acerconnect_m6e_5g_firmware+1EPSS score0.42%
The hard-coded APK resource files never expire, and the shared scepter leads to information leaks and potential misuse.CVE-2026-49190acerconnect_m6e_5g_firmware+1EPSS score0.81%
The system fails to evaluate instructional permissions over multiple internal operation codes (opcodes), permitting unauthorized application installations or command executions.CVE-2026-49204acerconnect_m6e_5g_firmware+1EPSS score0.27%
Leftover debug modules contain fixed credentials for internal AWS Cognito test sandboxes, risking asset exploitation.CVE-2026-49189acerconnect_m6e_5g_firmware+1EPSS score0.14%
Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations.CVE-2026-49203acerconnect_m6e_5g_firmware+1EPSS score0.28%
Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be rewritten or deleted.CVE-2026-49194acerconnect_m6e_5g_firmware+1EPSS score0.42%
The debugging routine SCREEN_CLICK(5053) enables a connection to skip the standard device login prompt entirely and directly enter an interactive shell interface.CVE-2026-49191acerconnect_m6e_5g_firmware+1EPSS score0.53%
The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling pages.CVE-2026-49202acerconnect_m6e_5g_firmware+1EPSS score0.45%
Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing (CORS) rules that allow cross-site theft.CVE-2026-49192acerconnect_m6e_5g_firmware+1EPSS score0.23%
The summary service endpoint suffers from an IDOR vulnerability where it fails to verify user ownership of hardware serial numbers, exposing device data to scraping.CVE-2026-50225acerconnect_m6e_5g_firmware+1EPSS score0.44%
The registration path /v1/account/register provides no bot mitigation mechanisms, allowing malicious automated systems to flood the database.CVE-2026-50208acerconnect_m6e_5g_firmware+1EPSS score0.24%
High-risk TrustAllCerts routines disable standard TLS certificate validation. Combined with hard-coded DES symmetric encryption keys, a Man-in-the-Middle (MITM) actor could decrypt network traffic.CVE-2026-50209acerconnect_m6e_5g_firmware+1EPSS score0.14%
Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting administrative ownership to an external attacker.CVE-2026-50212acerconnect_m6e_5g_firmware+1EPSS score0.27%
Weak validation logic within device dissociation API routines allows a remote entity to forcefully unbind unrelated user endpoints, causing severe denial of service.CVE-2026-50205acerconnect_m6e_5g_firmware+1EPSS score0.41%
System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data.CVE-2026-50213acerconnect_m6e_5g_firmware+1EPSS score0.39%
The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating predictable identification strings.CVE-2026-50210acerconnect_m6e_5g_firmware+1EPSS score0.42%
The device encrypts data using AES-CBC with static zero-filled Initialization Vectors (IVs), making it susceptible to replay attacks and known-plaintext decryption.