Skip to content
OpenAdvisories
Critical · 9.4 CVE-2026-49190 EUVD-2026-34209GHSA-v76p-jwh5-4pcm

Missing Per-Instruction Authorization Checks

Published Jun 4, 2026 · Updated Jun 4, 2026 · Assigned by Acer

Description

The system fails to evaluate instructional permissions over multiple internal operation codes (opcodes), permitting unauthorized application installations or command executions.

Affected products

VendorProductAffectedFixed
Acer Connect M6E 5G Portable WiFi Router ≤ M6E_AI_1.00.000019 —

References