Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-49185 EUVD-2026-34199GHSA-78x5-76fx-mcp6

Instruction Injection via FieldX MDM

Published Jun 4, 2026 · Updated Jun 4, 2026 · Assigned by Acer

Description

The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/instruction injection.

Affected products

VendorProductAffectedFixed
Acer Connect M6E 5G Portable WiFi Router ≤ M6E_AI_1.00.000019 —

References