CVE-2026-49188
Elevated Root Command Execution via ai_cmd Sockets
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), paving the way for unauthenticated users to execute arbitrary root commands.
| CWE | CWE-489 |
| Vendor | acer |
| Product | connect m6e 5g portable wifi router |
| Published | Jun 4, 2026 |
| Last Updated | Jun 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for acer connect m6e 5g portable wifi router
Be the first to know when new unknown vulnerabilities affecting acer connect m6e 5g portable wifi router are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Acer / Connect M6E 5G Portable WiFi Router
* ≤ M6E_AI_1.00.000019
References
Credits
Ta-Lun Yen