Skip to main content

Acer Connect M6E CVE-2026-49187

| EUVDEUVD-2026-34204 HIGH
Information Exposure (CWE-200)
2026-06-04 Acer GHSA-mgmr-hqww-q343
Information Disclosure Connect M6E 5G Portable Wifi Router
8.7
CVSS 4.0 · NVD
Share

Severity by source

NVD PRIMARY
8.7 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

3
Analysis Generated
Jun 04, 2026 - 07:45 vuln.today
CVSS changed
Jun 04, 2026 - 06:22 NVD
8.7 (HIGH)
CVE Published
Jun 04, 2026 - 03:50 nvd
UNKNOWN (no severity yet)

DescriptionCVE.org

The hard-coded APK resource files never expire, and the shared scepter leads to information leaks and potential misuse.

AnalysisAI

Information disclosure in the Acer Connect M6E 5G Portable WiFi Router (firmware versions up to and including M6E_AI_1.00.000019) stems from hard-coded, non-expiring credentials embedded in the companion APK that are shared across all deployments. Remote attackers can extract these static secrets from any copy of the application and use them to access sensitive router data without authentication, and no public exploit identified at time of analysis.

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Obtain Acer Connect APK
Delivery
Decompile and extract hard-coded scepter
Exploit
Identify endpoints trusting the shared secret
Execution
Send crafted request impersonating legitimate client
Impact
Retrieve sensitive router/subscriber data
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires that the Acer Connect M6E 5G Portable WiFi Router be running firmware at or below M6E_AI_1.00.000019 with its companion Android APK in use, and that the API endpoints or device interfaces which trust the hard-coded shared secret be reachable by the attacker (network attack vector per CVSS AV:N). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS v4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H) yields 8.7 - network-reachable, low complexity, no privileges or user interaction, and high confidentiality impact with no integrity or availability effect, which matches a credential/data-disclosure flaw rather than an RCE. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker downloads the Acer Connect companion APK from a public mirror, decompiles it with jadx, and extracts the hard-coded 'scepter' token from its resource files. Because the same token is embedded in every distribution, the attacker can then issue authenticated-looking API calls to any internet-reachable M6E device or backend service that trusts the shared secret, harvesting subscriber/device data at scale without ever touching the victim's network directly.
Remediation Patch status is unclear from the provided data - Acer's community advisory at https://community.acer.com/en/kb/articles/19707 should be consulted for the fixed firmware and APK build; no vendor-released patch version was independently confirmed in the supplied intelligence. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

24 hours: Inventory all Acer Connect M6E 5G routers (firmware M6E_AI_1.00.000019 and earlier); document current configuration and isolation status; restrict network access to management interfaces. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Connect M6E 5G Portable Wifi Router

View all
CVE-2026-49185 CRITICAL
10.0 Jun 04

Unauthenticated remote command injection in Acer Connect M6E 5G Portable WiFi Router (firmware ≤ M6E_AI_1.00.000019) all
CVE-2026-49190 CRITICAL
9.4 Jun 04

Command injection in the Acer Connect M6E 5G Portable WiFi Router allows authenticated remote attackers to install arbit
CVE-2026-49194 CRITICAL
9.4 Jun 04

Authentication bypass in the Acer Connect M6E 5G Portable WiFi Router allows low-privileged remote attackers to reach a

CVE-2026-49191 CRITICAL
9.3 Jun 04

Authentication bypass in the Acer Connect M6E 5G Portable WiFi Router's M3WebServer production build exposes hard-coded

CVE-2026-50214 CRITICAL
9.3 Jun 04

Authentication bypass in the Acer Connect M6E 5G Portable WiFi Router (firmware ≤ M6E_AI_1.00.000019) allows remote atta
CVE-2026-50209 CRITICAL
9.3 Jun 04

Privilege escalation via MDM endpoint hijack in the Acer Connect M6E 5G Portable WiFi Router (firmware ≤M6E_AI_1.00.0000
CVE-2026-50208 CRITICAL
9.2 Jun 04

Cryptographic weaknesses in the Acer Connect M6E 5G Portable WiFi Router (firmware versions through M6E_AI_1.00.000019)

CVE-2026-50205 HIGH
8.8 Jun 04

Sensitive information disclosure in the Acer Connect M6E 5G Portable WiFi Router exposes cleartext SMTP authentication p
CVE-2026-49202 HIGH
8.8 Jun 04

Unauthenticated exposure of internal multimedia session archives in the Acer Connect M6E 5G Portable WiFi Router lets re
CVE-2026-50211 HIGH
8.8 Jun 04

Exposed factory diagnostics in Acer Connect M6E 5G Portable WiFi Router (firmware M6E_AI_1.00.000019 and earlier) allow

CVE-2026-50225 HIGH
8.8 Jun 04

Database flooding via unauthenticated abuse of Acer Connect M6E 5G Portable WiFi Router's registration endpoint allows r
CVE-2026-49193 HIGH
8.7 Jun 04

Public exposure of telemetry data affects Acer Connect M6E 5G Portable WiFi Router, where misconfigured cloud storage co

Same weakness CWE-200 – Information Exposure

View all
CVE-2025-31125 MEDIUM POC
5.3
CVE-2025-11749 CRITICAL POC
9.8
CVE-2024-0305 MEDIUM POC
5.3
CVE-2025-30208 MEDIUM POC
5.3
CVE-2020-36848 HIGH POC
7.5
CVE-2025-24071 MEDIUM POC
6.5
CVE-2026-20133 MEDIUM POC
6.5
CVE-2025-34098 HIGH POC
7.1

Same technique Information Disclosure

View all
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2014-6324 HIGH POC
8.8
CVE-2017-0213 HIGH POC
7.3
CVE-2016-7255 HIGH POC
7.8
CVE-2010-0232 HIGH POC
7.8
CVE-2025-30066 HIGH POC
8.6
CVE-2025-54236 CRITICAL POC
9.1

Share

CVE-2026-49187 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy