acer connect m6e 5g firmware Vulnerabilities

acer connect m6e 5g firmware has 26 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting acer connect m6e 5g firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include connect m6e 5g.

• Firmware Theft & IMEI Spoofing via Connect-OTA

  CVE-2026-50226CWE-321
  Medium · CVSS 6.9

  EPSS 0.2% (9th pct) · 2026-06-04
• Account Creation Exhaustion

  CVE-2026-50225CWE-306
  High · CVSS 8.8

  EPSS 0.2% (16th pct) · 2026-06-04
• Unauthenticated IPv6 WAN Management Exposure

  CVE-2026-50224CWE-200
  Medium · CVSS 6.9

  EPSS 0.2% (15th pct) · 2026-06-04
• Shared Secret Quota Inflation

  CVE-2026-50214CWE-345
  Critical · CVSS 9.3

  EPSS 0.2% (6th pct) · 2026-06-04
• Bulk User Private Data Harvesting

  CVE-2026-50213CWE-798
  High · CVSS 8.7

  EPSS 0.2% (14th pct) · 2026-06-04
• Arbitrary Remote Device Unbinding

  CVE-2026-50212CWE-400
  High · CVSS 7.1

  EPSS 0.2% (6th pct) · 2026-06-04
• Exposed Factory Testing App Boundaries

  CVE-2026-50211CWE-134
  High · CVSS 8.8

  EPSS 0.3% (22th pct) · 2026-06-04
• Weak Static Cryptographic Initialization Vectors

  CVE-2026-50210CWE-200
  Medium · CVSS 6.9

  EPSS 0.2% (16th pct) · 2026-06-04
• MDM Server Registration Overriding

  CVE-2026-50209CWE-732
  Critical · CVSS 9.3

  EPSS 0.1% (1th pct) · 2026-06-04
• Permissive TrustAllCerts TLS Verification

  CVE-2026-50208CWE-330
  Critical · CVSS 9.2

  EPSS 0.1% (4th pct) · 2026-06-04
• Local Modem Manipulation via Binder Interfaces

  CVE-2026-50207CWE-22
  High · CVSS 8.5

  EPSS 0.1% (3th pct) · 2026-06-04
• VPN Command Injection Vulnerability

  CVE-2026-50206CWE-78
  High · CVSS 8.5

  EPSS 0.7% (52th pct) · 2026-06-04
• Plaintext Log Credential Leakage

  CVE-2026-50205CWE-532
  High · CVSS 8.8

  EPSS 0.2% (15th pct) · 2026-06-04
• Hard-coded AWS Cognito Testing Accounts

  CVE-2026-49204CWE-798
  Medium · CVSS 6.9

  EPSS 0.2% (6th pct) · 2026-06-04
• Unverified Meeting Recording Endpoints & Permissive CORS

  CVE-2026-49202CWE-287
  High · CVSS 8.8

  EPSS 0.3% (18th pct) · 2026-06-04
• Unauthenticated eSIM Configuration Manipulation

  CVE-2026-49203CWE-287
  High · CVSS 7.2

  EPSS 0.2% (7th pct) · 2026-06-04
• SCREEN_CLICK Authentication Bypass

  CVE-2026-49194CWE-287
  Critical · CVSS 9.4

  EPSS 0.2% (14th pct) · 2026-06-04
• Publicly Readable AWS S3 Telemetry Buckets

  CVE-2026-49193CWE-200
  High · CVSS 8.7

  EPSS 0.2% (16th pct) · 2026-06-04
• Summary Service Insecure Direct Object Reference

  CVE-2026-49192CWE-639
  Medium · CVSS 5.3

  EPSS 0.1% (4th pct) · 2026-06-04
• Exposed Hard-coded M3WebServer Backend API Key

  CVE-2026-49191CWE-287
  Critical · CVSS 9.3

  EPSS 0.3% (22th pct) · 2026-06-04
• Missing Per-Instruction Authorization Checks

  CVE-2026-49190CWE-78
  Critical · CVSS 9.4

  EPSS 0.4% (36th pct) · 2026-06-04
• Broadcast Receiver Privilege Escalation

  CVE-2026-49189CWE-269
  High · CVSS 8.5

  EPSS 0.1% (1th pct) · 2026-06-04
• Elevated Root Command Execution via ai_cmd Sockets

  CVE-2026-49188CWE-489
  High · CVSS 8.7

  EPSS 0.3% (25th pct) · 2026-06-04
• Hard-coded APK Resource Credentials & Scepters

  CVE-2026-49187CWE-200
  High · CVSS 8.7

  EPSS 0.2% (16th pct) · 2026-06-04
• Lack of MQTT Broker Topic Access Control Lists

  CVE-2026-49186CWE-287
  High · CVSS 8.6

  EPSS 0.3% (25th pct) · 2026-06-04
• Instruction Injection via FieldX MDM

  CVE-2026-49185CWE-78
  Critical · CVSS 10.0

  EPSS 0.4% (33th pct) · 2026-06-04