Connect M6e 5g Portable Wifi Router CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2026-50208

Permissive TrustAllCerts TLS Verification

High-risk TrustAllCerts routines disable standard TLS certificate validation. Combined with hard-coded DES symmetric encryption keys, a Man-in-the-Middle (MITM) actor could decrypt network traffic.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Acer

Products

Connect M6e 5g Connect M6e 5g Firmware Connect M6e 5g Portable Wifi Router

CVE-2026-50209

MDM Server Registration Overriding

Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting administrative ownership to an external attacker.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Acer

Products

Connect M6e 5g Connect M6e 5g Firmware Connect M6e 5g Portable Wifi Router

CVE-2026-50210

Weak Static Cryptographic Initialization Vectors

The device encrypts data using AES-CBC with static zero-filled Initialization Vectors (IVs), making it susceptible to replay attacks and known-plaintext decryption.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Acer

Products

Connect M6e 5g Connect M6e 5g Firmware Connect M6e 5g Portable Wifi Router

CVE-2026-50211

Exposed Factory Testing App Boundaries

Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail builds, giving malicious apps write privileges to internal NVRAM registers.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Acer

Products

Connect M6e 5g Connect M6e 5g Firmware Connect M6e 5g Portable Wifi Router

CVE-2026-50212

Arbitrary Remote Device Unbinding

Weak validation logic within device dissociation API routines allows a remote entity to forcefully unbind unrelated user endpoints, causing severe denial of service.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Acer

Products

Connect M6e 5g Connect M6e 5g Firmware Connect M6e 5g Portable Wifi Router

CVE-2026-50213

Bulk User Private Data Harvesting

The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating predictable identification strings.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Acer

Products

Connect M6e 5g Connect M6e 5g Firmware Connect M6e 5g Portable Wifi Router

« first previous Page 2 of 2.