CVE-2026-49202

Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing (CORS) rules that allow cross-site theft.

Score

CVSS 4.0 8.8 High

Status

Analyzed - 8fc372e3-d9c5-46e4-9410-38469745c639

Published

2026-06-04

Last modified

2026-06-04

Weaknesses

CWE-287

Affected products

• Connect M6e 5g Firmware (Acer)
• Connect M6e 5g Portable Wifi Router (Acer)

References

• https://community.acer.com/en/kb/articles/19707