Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials for arbitrary IMEI numbers. This allows unauthorized actors to list catalog items and extract protected binaries from pre-signed cloud links.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
🟠 AcerConnect, Hard-coded Cryptographic Key, #CVE-2026-50226 (Medium) -DC-Jun2026-255 https://dailycve.com/acerconnect-hard-coded-cryptographic-key-cve-2026-50226-medium-dc-jun2026-255/
Post summary
The post announces the CVE‑2026‑50226 vulnerability in AcerConnect, noting a hard‑coded cryptographic key and Medium severity, but offers no PoC, exploit, or mitigation details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | acer | connect_m6e_5g | - | - | - |
| OS | acer | connect_m6e_5g_firmware | - | - | - |