CVE-2026-49202highCWE-287

CVE-2026-49202: falha de alta gravidade em Acer Connect M6E 5G Portable WiFi Router

Unverified Meeting Recording Endpoints & Permissive CORS

Publicada em

Seguir esta CVE+ Monitorar Connect M6E 5G Portable WiFi Router

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.3%
Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing (CORS) rules that allow cross-site theft.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
Acer · Connect M6E 5G Portable WiFi Router
CVEs relacionadas — Acer Connect M6E 5G Portable WiFi Router

No mesmo produto, das mais perigosas para as menos.

CVE-2026-50206HIGHVPN Command Injection VulnerabilityEPSS 0.7%CVE-2026-49190CRITICALMissing Per-Instruction Authorization ChecksEPSS 0.4%CVE-2026-49185CRITICALInstruction Injection via FieldX MDMEPSS 0.4%CVE-2026-49186HIGHLack of MQTT Broker Topic Access Control ListsEPSS 0.3%CVE-2026-49188HIGHElevated Root Command Execution via ai_cmd SocketsEPSS 0.3%CVE-2026-49191CRITICALExposed Hard-coded M3WebServer Backend API KeyEPSS 0.3%