CVE-2026-50208criticalCWE-330

CVE-2026-50208: falha crítica em Acer Connect M6E 5G Portable WiFi Router

Permissive TrustAllCerts TLS Verification

Publicada em

Seguir esta CVE+ Monitorar Connect M6E 5G Portable WiFi Router

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.2epss 0.1%
High-risk TrustAllCerts routines disable standard TLS certificate validation. Combined with hard-coded DES symmetric encryption keys, a Man-in-the-Middle (MITM) actor could decrypt network traffic.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Produtos afetados
Acer · Connect M6E 5G Portable WiFi Router
CVEs relacionadas — Acer Connect M6E 5G Portable WiFi Router

No mesmo produto, das mais perigosas para as menos.

CVE-2026-50206HIGHVPN Command Injection VulnerabilityEPSS 0.7%CVE-2026-49190CRITICALMissing Per-Instruction Authorization ChecksEPSS 0.4%CVE-2026-49185CRITICALInstruction Injection via FieldX MDMEPSS 0.4%CVE-2026-49186HIGHLack of MQTT Broker Topic Access Control ListsEPSS 0.3%CVE-2026-49188HIGHElevated Root Command Execution via ai_cmd SocketsEPSS 0.3%CVE-2026-49191CRITICALExposed Hard-coded M3WebServer Backend API KeyEPSS 0.3%