CVE-2026-50209

9.3 criticalEPSS 0.10%

Critical (9.3) in acer connect m6e 5g firmware. EPSS 0.10% chance of exploitation in the next 30 days.

Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting administrative ownership to an external attacker.

Severity

CVSS 4.0

9.3 critical

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.10% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2026-06-04
Modified: 2026-07-22
Record from: the NVD, synced 2026-10-19

Affected

acer:connect_m6e_5g_firmware

References

https://community.acer.com/en/kb/articles/19707

Check your stack JSON