CVE-2026-49192
Summary Service Insecure Direct Object Reference
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The summary service endpoint suffers from an IDOR vulnerability where it fails to verify user ownership of hardware serial numbers, exposing device data to scraping.
| CWE | CWE-639 |
| Vendor | acer |
| Product | connect m6e 5g portable wifi router |
| Published | Jun 4, 2026 |
| Last Updated | Jun 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for acer connect m6e 5g portable wifi router
Be the first to know when new unknown vulnerabilities affecting acer connect m6e 5g portable wifi router are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Acer / Connect M6E 5G Portable WiFi Router
* ≤ M6E_AI_1.00.000019
References
Credits
Ta-Lun Yen