PT-2026-46145 · Acer · Connect M6E 5G Portable Wifi Router

Ta-Lun Yen · Published 2026-06-04 · Updated 2026-06-04 · CVE-2026-49188

Mitre

CVSS v4.0

8.7

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

The ai cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), paving the way for unauthenticated users to execute arbitrary root commands.

Fix

Weakness Enumeration

CWE-489

Related Identifiers

CVE-2026-49188

Affected Products

Connect M6E 5G Portable Wifi Router

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-49188 · Security Note
• https://community.acer.com/en/kb/articles/19707 · Note