PT-2026-46162 · Acer · Connect M6E 5G Portable Wifi Router+1

Ta-Lun Yen · CVE-2026-50210 · Published 2026-06-04 · Updated 2026-07-22

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The device encrypts data using AES-CBC (Advanced Encryption Standard in Cipher Block Chaining mode) with static zero-filled Initialization Vectors (IVs). This implementation allows for known-plaintext decryption and replay attacks, where an attacker captures and re-transmits valid data packets to deceive the system. The issue is exploitable over the network without requiring authentication.

Recommendations Replace the static zero-filled IVs with random IVs for every encryption operation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-50210

Affected Products

Connect M6E 5G Portable Wifi Router

Connect M6E 5G Firmware

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-50210 · Security Note
• https://community.acer.com/en/kb/articles/19707 · Vendor Advisory
• https://t.me/cveNotify/213361 · Telegram Post
• https://t.me/CVEtracker/55806 · Telegram Post
• https://t.me/cveNotify/165949 · Telegram Post
• https://twitter.com/DFIR_Lab/status/2062715627463163970 · Twitter Post