CVE-2026-50211Disclosure(acer / connect_m6e_5g)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail builds, giving malicious apps write privileges to internal NVRAM registers.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-134

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • connect_m6e_5g
  • connect_m6e_5g_firmware

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-06-04); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
connect_m6e_5gconnect_m6e_5g_firmware

1 version affected across 2 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-04: 1Mentions · 2026-06-05: 1Technical Details · 2026-06-05: 106-0406-05
Signal classification1 categories
Disclosure
2100.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • DFIR Lab@DFIR_Lab
    Disclosure

    🚨 CRITICAL: CVE-2026-50211 (CVSS 9.8) Leftover diagnostic software in retail builds exposes internal NVRAM registers to malicious apps with write privileges. Network exploitable, no user interaction required. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/bIj5i4j8aI

    Post summary

    The tweet announces a critical vulnerability (CVE‑2026‑50211) with a CVSS score of 9.8 that allows network‑level exploitation of internal NVRAM registers via leftover diagnostic software, but does not provide PoC, exploit code, or patch details.

    0000045
    39 followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    We have just added an important vulnerability affecting Acer Connect M6E 5G Portable WiFi Router (CVE-2026-50211) https://vuldb.com/vuln/368285

    Post summary

    A new vulnerability (CVE-2026-50211) affecting the Acer Connect M6E 5G Portable WiFi Router has been disclosed via a VulDB link, but no technical, exploitation, or remediation details are provided.

    0000074
    2.2K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWacerconnect_m6e_5g---
OSacerconnect_m6e_5g_firmware---

Explore more