Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-49191 EUVD-2026-34210GHSA-gpg2-45rx-77ff

Exposed Hard-coded M3WebServer Backend API Key

Published Jun 4, 2026 · Updated Jun 4, 2026 · Assigned by Acer

Description

The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling pages.

Affected products

VendorProductAffectedFixed
Acer Connect M6E 5G Portable WiFi Router ≤ M6E_AI_1.00.000019 —

References