PT-2026-46148 · Acer · Connect M6E 5G Portable Wifi Router+1

Ta-Lun Yen · CVE-2026-49190 · Published 2026-06-04 · Updated 2026-07-22

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The system fails to evaluate instructional permissions over multiple internal operation codes (opcodes), which are the machine language instructions that the CPU executes. This failure allows for the installation of unauthorized applications or the execution of arbitrary commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-49190

Affected Products

Connect M6E 5G Portable Wifi Router

Connect M6E 5G Firmware

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-49190 · Security Note
• https://community.acer.com/en/kb/articles/19707 · Vendor Advisory
• https://t.me/cveNotify/213348 · Telegram Post