Which versions of Acer Connect M6E are affected by CVE-2026-50205?

The Acer Connect M6E 5G Portable WiFi Router contains a critical information disclosure vulnerability that exposes employee SMTP credentials and corporate identification data through system log…

How to fix or mitigate CVE-2026-50205?

Within 24 hours: Inventory all Acer Connect M6E 5G routers in production and isolate from sensitive networks or disable if operationally feasible. Within 7 days: Force immediate password resets for any SMTP accounts that may have been exposed, audit system logs for unauthorized access patterns, and notify affected employees of potential data exposure. Within 30 days: Evaluate and deploy alternative WiFi router solutions from vendors with active security support, and implement network segmentation to limit remote access to router management interfaces.

Acer Connect M6E CVE-2026-50205

Q: What is the CVSS score of CVE-2026-50205?

CVE-2026-50205 has a CVSS 4.0 base score of 8.8 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-34217 HIGH

Insertion of Sensitive Information into Log File (CWE-532)

2026-06-04 Acer

GHSA-3wcr-5c6g-86gm

Information Disclosure Connect M6E 5G Portable Wifi Router Acer

8.8

CVSS 4.0 · Vendor: Acer

Severity by source

Vendor (Acer) PRIMARY

8.8 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (Acer) · only source for this CVE.

CVSS VectorVendor: Acer

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jun 04, 2026 - 07:33 vuln.today

CVSS changed

Jun 04, 2026 - 07:22 NVD

8.8 (HIGH)

DescriptionCVE.org

System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data.

AnalysisAI

Sensitive information disclosure in the Acer Connect M6E 5G Portable WiFi Router exposes cleartext SMTP authentication passwords and employee corporate identification data through system log files. With a CVSS 4.0 score of 8.8 (high confidentiality impact, network attack vector, no privileges or user interaction required) and no public exploit identified at time of analysis, the flaw enables remote attackers who can reach the log output to harvest credentials and PII without authentication.

Technical ContextAI

The affected device is the Acer Connect M6E 5G Portable WiFi Router, a consumer/SMB mobile broadband gateway (CPE: cpe:2.3:a:acer:connect_m6e_5g_portable_wifi_router). The root cause is classified as CWE-532 (Insertion of Sensitive Information into Log File), a logging hygiene defect where the firmware writes secrets - specifically SMTP server authentication credentials used for outbound email/alerting - into system logs in plaintext, alongside corporate identifier fields. SMTP credentials are typically configured for notification or alerting features in such routers; logging them undermines transport-layer protections (TLS to the mail server) because the secrets are persisted in cleartext on the device and in whatever logging destinations (syslog, web admin log viewer, remote log collectors) the router forwards to.

RemediationAI

Consult the Acer advisory at https://community.acer.com/en/kb/articles/19707 for firmware update guidance; the provided intelligence does not include a confirmed fix version, so this is best described as patch availability per vendor advisory with the exact patched firmware build not independently confirmed in this dataset. As compensating controls until firmware can be confirmed and applied, rotate the SMTP credentials configured on the device and disable the SMTP notification feature if not strictly required (eliminates the secret being logged at the cost of losing email alerts), restrict access to the router's management/log-viewer interface to a trusted management VLAN (mitigates remote retrieval but does not remove the on-device cleartext exposure), and disable or sanitize remote syslog forwarding destinations until the firmware fix is applied (loses centralized logging visibility). Treat any previously configured SMTP password as compromised and ensure it is not reused elsewhere.