Paper/Archive/CVE-2026-50209

CVE-2026-50209

Acer Connect M6E 5G Portable WiFi Router — MDM Server Registration Overriding

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 EPSS percentile 0.8.008 × 200.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting administrative ownership to an external attacker.

Affected

ProductAffectedFixed inSource

Connect M6E 5G Portable WiFi Router≤ M6E_AI_1.00.000019–CNA

Scores by source

Acer (CNA)9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcommunity.acer.com/en/kb/articles/19707