Approved changes feed: RSS · Atom

cpe:2.3:a:acer:connect_m6e_5g_portable_wifi_router:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAcer (e31959cf-1baa-5b00-aee9-36f2e290d607)
ProductConnect M6E 5G Portable Wifi Router (d187532f-1414-5b07-b17f-42775304e9a5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-50226 vulnerable 2026-06-08 08:07:02.797120 Firmware Theft & IMEI Spoofing via Connect-OTA
Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials for arbitrary IMEI numbers. This allows unauthorized actors to list catalog items and extract protected binaries from pre-signed cloud links.
Published: 2026-06-04T09:34:34.536Z
Updated: 2026-06-04T12:21:50.502Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50225 vulnerable 2026-06-08 08:07:02.796938 Account Creation Exhaustion
The registration path /v1/account/register provides no bot mitigation mechanisms, allowing malicious automated systems to flood the database.
Published: 2026-06-04T09:29:57.573Z
Updated: 2026-06-04T12:22:34.513Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50224 vulnerable 2026-06-08 08:07:02.796634 Unauthenticated IPv6 WAN Management Exposure
The web administration panel binds broadly to the public IPv6 address space on port [::]:8080 without default firewall limits, making internal API endpoints reachable over the WAN.
Published: 2026-06-04T09:26:00.770Z
Updated: 2026-06-04T12:56:40.589Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50214 vulnerable 2026-06-08 08:07:02.792639 Shared Secret Quota Inflation
The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing arbitrary creation of zero-cost network access plans.
Published: 2026-06-04T09:20:37.959Z
Updated: 2026-06-04T13:07:09.202Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50213 vulnerable 2026-06-08 08:07:02.792464 Bulk User Private Data Harvesting
The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating predictable identification strings.
Published: 2026-06-04T07:39:21.829Z
Updated: 2026-06-04T12:45:21.552Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50212 vulnerable 2026-06-08 08:07:02.791930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50211 vulnerable 2026-06-08 08:07:02.791778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50210 vulnerable 2026-06-08 08:07:02.791619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50209 vulnerable 2026-06-08 08:07:02.791447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50208 vulnerable 2026-06-08 08:07:02.791168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50207 vulnerable 2026-06-08 08:07:02.790865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50206 vulnerable 2026-06-08 08:07:02.790670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50205 vulnerable 2026-06-08 08:07:02.790297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49204 vulnerable 2026-06-08 08:05:12.428907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49203 vulnerable 2026-06-08 08:05:12.428746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49202 vulnerable 2026-06-08 08:05:12.428585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49194 vulnerable 2026-06-08 08:05:12.422358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49193 vulnerable 2026-06-08 08:05:12.422146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49192 vulnerable 2026-06-08 08:05:12.421890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49191 vulnerable 2026-06-08 08:05:12.421740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49190 vulnerable 2026-06-08 08:05:12.421577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49189 vulnerable 2026-06-08 08:05:12.421338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49188 vulnerable 2026-06-08 08:05:12.421122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49187 vulnerable 2026-06-08 08:05:12.420801 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49186 vulnerable 2026-06-08 08:05:12.420545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49185 vulnerable 2026-06-08 08:05:12.420168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.