Skip to main content

Acer Connect M6E CVE-2026-49189

| EUVDEUVD-2026-34208 HIGH
Improper Privilege Management (CWE-269)
2026-06-04 Acer GHSA-hph7-5jr2-h359
Privilege Escalation Connect M6E 5G Portable Wifi Router
8.5
CVSS 4.0 · NVD
Share

Severity by source

NVD PRIMARY
8.5 HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

3
Analysis Generated
Jun 04, 2026 - 07:46 vuln.today
CVSS changed
Jun 04, 2026 - 06:22 NVD
8.5 (HIGH)
CVE Published
Jun 04, 2026 - 05:23 nvd
UNKNOWN (no severity yet)

DescriptionCVE.org

Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations.

AnalysisAI

Local privilege escalation in the Acer Connect M6E 5G Portable WiFi Router (firmware ≤M6E_AI_1.00.000019) allows low-privileged local software components to invoke administrative operations via an unprotected Broadcast Receiver. CVSS 4.0 scores this 8.5 (High) with local attack vector and low privileges required, and no public exploit has been identified at time of analysis.

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Install low-privileged local component on device
Delivery
Enumerate exported Broadcast Receivers
Exploit
Craft malicious intent to core receiver
Execution
Receiver invokes administrative operation
Impact
Escalate to admin-level control of router
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The attacker must already be able to run a local, low-privileged software component on the Acer Connect M6E 5G Portable WiFi Router (PR:L, AV:L) - for example a sideloaded or companion application - and the device must be running firmware at or below M6E_AI_1.00.000019 where the core Broadcast Receiver is declared with unchecked public access permissions. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H) indicates a local attack requiring low privileges, no user interaction, and yielding high confidentiality, integrity, and availability impact on the vulnerable component - a profile consistent with on-device privilege escalation rather than remote compromise. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker convinces the victim to install a benign-looking application on a phone or device paired with the Acer Connect M6E (or otherwise plants a low-privileged process on it); that application sends a crafted intent to the exposed Broadcast Receiver and triggers administrative operations such as configuration changes or privileged command execution without holding admin rights. No public exploit code has been identified at time of analysis, but the construction of a proof-of-concept intent-broadcaster is straightforward for an attacker familiar with the platform.
Remediation Upgrade the Acer Connect M6E firmware to a release later than M6E_AI_1.00.000019 once Acer publishes a fixed build, following the guidance in the Acer advisory at https://community.acer.com/en/kb/articles/19707; patch availability per vendor advisory should be confirmed against the linked KB. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

24 hours: Inventory all Acer Connect M6E 5G units and confirm firmware versions (≤M6E_AI_1.00.000019) affected. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Connect M6E 5G Portable Wifi Router

View all
CVE-2026-49185 CRITICAL
10.0 Jun 04

Unauthenticated remote command injection in Acer Connect M6E 5G Portable WiFi Router (firmware ≤ M6E_AI_1.00.000019) all
CVE-2026-49190 CRITICAL
9.4 Jun 04

Command injection in the Acer Connect M6E 5G Portable WiFi Router allows authenticated remote attackers to install arbit
CVE-2026-49194 CRITICAL
9.4 Jun 04

Authentication bypass in the Acer Connect M6E 5G Portable WiFi Router allows low-privileged remote attackers to reach a

CVE-2026-49191 CRITICAL
9.3 Jun 04

Authentication bypass in the Acer Connect M6E 5G Portable WiFi Router's M3WebServer production build exposes hard-coded

CVE-2026-50214 CRITICAL
9.3 Jun 04

Authentication bypass in the Acer Connect M6E 5G Portable WiFi Router (firmware ≤ M6E_AI_1.00.000019) allows remote atta
CVE-2026-50209 CRITICAL
9.3 Jun 04

Privilege escalation via MDM endpoint hijack in the Acer Connect M6E 5G Portable WiFi Router (firmware ≤M6E_AI_1.00.0000
CVE-2026-50208 CRITICAL
9.2 Jun 04

Cryptographic weaknesses in the Acer Connect M6E 5G Portable WiFi Router (firmware versions through M6E_AI_1.00.000019)

CVE-2026-50205 HIGH
8.8 Jun 04

Sensitive information disclosure in the Acer Connect M6E 5G Portable WiFi Router exposes cleartext SMTP authentication p
CVE-2026-49202 HIGH
8.8 Jun 04

Unauthenticated exposure of internal multimedia session archives in the Acer Connect M6E 5G Portable WiFi Router lets re
CVE-2026-50211 HIGH
8.8 Jun 04

Exposed factory diagnostics in Acer Connect M6E 5G Portable WiFi Router (firmware M6E_AI_1.00.000019 and earlier) allow

CVE-2026-50225 HIGH
8.8 Jun 04

Database flooding via unauthenticated abuse of Acer Connect M6E 5G Portable WiFi Router's registration endpoint allows r
CVE-2026-49193 HIGH
8.7 Jun 04

Public exposure of telemetry data affects Acer Connect M6E 5G Portable WiFi Router, where misconfigured cloud storage co

Same weakness CWE-269 – Improper Privilege Management

View all
CVE-2025-4334 CRITICAL POC
9.8
CVE-2025-6934 CRITICAL POC
9.8
CVE-2026-21533 HIGH POC
7.8
CVE-2024-57602 CRITICAL POC
9.8
CVE-2025-28399 CRITICAL POC
9.8
CVE-2026-12415 CRITICAL POC
9.8
CVE-2026-22039 CRITICAL POC
9.9
CVE-2026-26725 CRITICAL POC
9.8

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2025-11749 CRITICAL POC
9.8
CVE-2025-27007 CRITICAL POC
9.8
CVE-2025-2563 HIGH POC
8.1
CVE-2025-20281 CRITICAL POC
10.0
CVE-2016-0051 HIGH POC
7.8
CVE-2014-4076 HIGH POC
7.2
CVE-2026-22769 CRITICAL
10.0

Share

CVE-2026-49189 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy