9.3
Critique
CVE-2026-50209 Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint…
Description
Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting administrative ownership to an external attacker.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Connect M6E 5G Portable WiFi Router | Versions non publiées |
Autres CVE de Connect M6E 5G Portable WiFi Router
Les 26 CVE de Connect M6E 5G Portable WiFi Router →
CVE-2026-50226
Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials for…
6.9
Moyenne
CVE-2026-50225
The registration path /v1/account/register provides no bot mitigation mechanisms, allowing malicious automated systems…
8.8
Élevée
CVE-2026-50224
The web administration panel binds broadly to the public IPv6 address space on port [::]:8080 without default firewall…
6.9
Moyenne
CVE-2026-50214
The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing arbitrary…
9.3
Critique