Acer Connect M6E 5G vulnerabilities, page 2
26 vulnerabilities
Known vulnerabilities in Acer Connect M6E 5G, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-50214acerconnect_m6e_5g_firmware+1
EPSS score0.25%
The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing arbitrary creation of zero-cost network access plans.CVE-2026-50206acerconnect_m6e_5g_firmware+1EPSS score1.56%
Incoming VPN network profile settings fail to process special characters safely, enabling command injection via malicious config files.CVE-2026-50226acerconnect_m6e_5g_firmware+1EPSS score0.31%
Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials for arbitrary IMEI numbers. This allows unauthorized actors to list catalog items and extract protected binaries from pre-signed cloud links.CVE-2026-50224acerconnect_m6e_5g_firmware+1EPSS score0.40%
The web administration panel binds broadly to the public IPv6 address space on port [::]:8080 without default firewall limits, making internal API endpoints reachable over the WAN.CVE-2026-50211acerconnect_m6e_5g_firmware+1EPSS score0.52%
Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail builds, giving malicious apps write privileges to internal NVRAM registers.CVE-2026-50207acerconnect_m6e_5g_firmware+1EPSS score0.18%
The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to read baseband files or disable cellular connectivity.