CVE-2026-49192

MEDIUM CVSS 5.4 View on NVD ↗

Description

The summary service endpoint suffers from an IDOR vulnerability where it fails to verify user ownership of hardware serial numbers, exposing device data to scraping.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected Products

acer/connect_m6e_5g acer/connect_m6e_5g_firmware

References

https://community.acer.com/en/kb/articles/19707

Published: Jun 04, 2026 07:16 UTC Modified: Jun 04, 2026 19:39 UTC