Skip to content
OpenAdvisories
High · 8.8 CVE-2026-49202 EUVD-2026-34215GHSA-hfx8-6pxq-3fx3

Unverified Meeting Recording Endpoints & Permissive CORS

Published Jun 4, 2026 · Updated Jun 4, 2026 · Assigned by Acer

Description

Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing (CORS) rules that allow cross-site theft.

Affected products

VendorProductAffectedFixed
Acer Connect M6E 5G Portable WiFi Router ≤ M6E_AI_1.00.000019 —

References