Product by Acer
Acer Connect M6E 5G Firmware
26 known vulnerabilities in Acer Connect M6E 5G Firmware (Acer), 0 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
11
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-50206 | VPN Command Injection Vulnerability | 6.8 | |
| Critical | CVE-2026-49185 | Instruction Injection via FieldX MDM | 9.8 | |
| Critical | CVE-2026-49190 | Missing Per-Instruction Authorization Checks | 8.8 | |
| Critical | CVE-2026-49186 | Lack of MQTT Broker Topic Access Control Lists | 9.8 | |
| Critical | CVE-2026-49188 | Elevated Root Command Execution via ai_cmd Sockets | 9.8 | |
| Critical | CVE-2026-49191 | Exposed Hard-coded M3WebServer Backend API Key | 9.8 | |
| Critical | CVE-2026-50211 | Exposed Factory Testing App Boundaries | 9.8 | |
| Critical | CVE-2026-50214 | Shared Secret Quota Inflation | 9.8 | |
| Critical | CVE-2026-49194 | SCREEN_CLICK Authentication Bypass | 8.8 | |
| Critical | CVE-2026-50225 | Account Creation Exhaustion | 9.1 | |
| Critical | CVE-2026-50208 | Permissive TrustAllCerts TLS Verification | 9.4 | |
| Critical | CVE-2026-50209 | MDM Server Registration Overriding | 7.8 | |
| High | CVE-2026-49202 | Unverified Meeting Recording Endpoints & Permissive CORS | 8.6 | |
| High | CVE-2026-50205 | Plaintext Log Credential Leakage | 8.2 | |
| High | CVE-2026-49187 | Hard-coded APK Resource Credentials & Scepters | 7.5 | |
| High | CVE-2026-49193 | Publicly Readable AWS S3 Telemetry Buckets | 7.5 | |
| High | CVE-2026-50213 | Bulk User Private Data Harvesting | 7.5 | |
| High | CVE-2026-50207 | Local Modem Manipulation via Binder Interfaces | 7.8 | |
| High | CVE-2026-49189 | Broadcast Receiver Privilege Escalation | 7.8 | |
| High | CVE-2026-49203 | Unauthenticated eSIM Configuration Manipulation | 8.3 | |
| High | CVE-2026-50210 | Weak Static Cryptographic Initialization Vectors | 7.5 | |
| Medium | CVE-2026-50224 | Unauthenticated IPv6 WAN Management Exposure | 4.9 | |
| High | CVE-2026-50212 | Arbitrary Remote Device Unbinding | 6.5 | |
| Medium | CVE-2026-50226 | Firmware Theft & IMEI Spoofing via Connect-OTA | 5.3 | |
| Medium | CVE-2026-49204 | Hard-coded AWS Cognito Testing Accounts | 6.5 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,