Connect M6E 5G Portable WiFi Router — Vulnerabilities & Security Advisories 26

All 26 CVE vulnerabilities found in Connect M6E 5G Portable WiFi Router, with AI-generated Chinese analysis, references, and POCs.

This page aggregates reported security vulnerabilities for the Connect M6E 5G Portable WiFi Router, categorized by specific weakness types and associated security tags. It collects a comprehensive record of historical advisories and flaw reports, covering the operational lifecycle of the device from its initial deployment through recent firmware updates. Readers can use this section to track the vendor's security disclosures, analyze common weakness classes affecting this hardware platform, and review the complete vulnerability history of the product.

Vendor: Acer

CVE ID	Title	CVSS	Severity	Published
CVE-2026-50226	Firmware Theft & IMEI Spoofing via Connect-OTA CWE-321	-	-	2026-06-04
CVE-2026-50225	Account Creation Exhaustion CWE-306	-	-	2026-06-04
CVE-2026-50224	Unauthenticated IPv6 WAN Management Exposure CWE-200	-	-	2026-06-04
CVE-2026-50214	Shared Secret Quota Inflation CWE-345	-	-	2026-06-04
CVE-2026-50213	Bulk User Private Data Harvesting CWE-798	-	-	2026-06-04
CVE-2026-50212	Arbitrary Remote Device Unbinding CWE-400	-	-	2026-06-04
CVE-2026-50211	Exposed Factory Testing App Boundaries CWE-134	-	-	2026-06-04
CVE-2026-50210	Weak Static Cryptographic Initialization Vectors CWE-200	-	-	2026-06-04
CVE-2026-50209	MDM Server Registration Overriding CWE-732	-	-	2026-06-04
CVE-2026-50208	Permissive TrustAllCerts TLS Verification CWE-330	-	-	2026-06-04
CVE-2026-50207	Local Modem Manipulation via Binder Interfaces CWE-22	-	-	2026-06-04
CVE-2026-50206	VPN Command Injection Vulnerability CWE-78	-	-	2026-06-04
CVE-2026-50205	Plaintext Log Credential Leakage CWE-532	-	-	2026-06-04
CVE-2026-49204	Hard-coded AWS Cognito Testing Accounts CWE-798	-	-	2026-06-04
CVE-2026-49202	Unverified Meeting Recording Endpoints & Permissive CORS CWE-287	-	-	2026-06-04
CVE-2026-49203	Unauthenticated eSIM Configuration Manipulation CWE-287	-	-	2026-06-04
CVE-2026-49194	SCREEN_CLICK Authentication Bypass CWE-287	-	-	2026-06-04
CVE-2026-49193	Publicly Readable AWS S3 Telemetry Buckets CWE-200	-	-	2026-06-04
CVE-2026-49192	Summary Service Insecure Direct Object Reference CWE-639	-	-	2026-06-04
CVE-2026-49191	Exposed Hard-coded M3WebServer Backend API Key CWE-287	-	-	2026-06-04
CVE-2026-49190	Missing Per-Instruction Authorization Checks CWE-78	-	-	2026-06-04
CVE-2026-49189	Broadcast Receiver Privilege Escalation CWE-269	-	-	2026-06-04
CVE-2026-49188	Elevated Root Command Execution via ai_cmd Sockets CWE-489	-	-	2026-06-04
CVE-2026-49187	Hard-coded APK Resource Credentials & Scepters CWE-200	-	-	2026-06-04
CVE-2026-49186	Lack of MQTT Broker Topic Access Control Lists CWE-287	-	-	2026-06-04
CVE-2026-49185	Instruction Injection via FieldX MDM CWE-78	-	-	2026-06-04

All 26 known CVE vulnerabilities affecting Connect M6E 5G Portable WiFi Router with full Chinese analysis, references, and POCs where available.