CVE-2026-49202: Acer Connect m6e 5g Firmware

High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing (CORS) rules that allow cross-site theft.

Affected products

• Acer Connect m6e 5g Firmware: up to and including m6e_ai_1.00.000019

Published 2026-06-04. Last modified 2026-07-22.