CVE-2026-49190criticalCWE-78

CVE-2026-49190: falha crítica em Acer Connect M6E 5G Portable WiFi Router

Missing Per-Instruction Authorization Checks

Publicada em

Seguir esta CVE+ Monitorar Connect M6E 5G Portable WiFi Router

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.4epss 0.4%
The system fails to evaluate instructional permissions over multiple internal operation codes (opcodes), permitting unauthorized application installations or command executions.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Produtos afetados
Acer · Connect M6E 5G Portable WiFi Router
CVEs relacionadas — Acer Connect M6E 5G Portable WiFi Router

No mesmo produto, das mais perigosas para as menos.

CVE-2026-50206HIGHVPN Command Injection VulnerabilityEPSS 0.7%CVE-2026-49185CRITICALInstruction Injection via FieldX MDMEPSS 0.4%CVE-2026-49186HIGHLack of MQTT Broker Topic Access Control ListsEPSS 0.3%CVE-2026-49188HIGHElevated Root Command Execution via ai_cmd SocketsEPSS 0.3%CVE-2026-49191CRITICALExposed Hard-coded M3WebServer Backend API KeyEPSS 0.3%CVE-2026-50211HIGHExposed Factory Testing App BoundariesEPSS 0.3%