Skip to content
OpenAdvisories
High · 8.5 CVE-2026-50206 EUVD-2026-34218GHSA-vhmh-w6ph-mvx3

VPN Command Injection Vulnerability

Published Jun 4, 2026 · Updated Jun 4, 2026 · Assigned by Acer

Description

Incoming VPN network profile settings fail to process special characters safely, enabling command injection via malicious config files.

Affected products

VendorProductAffectedFixed
Acer Connect M6E 5G Portable WiFi Router ≤ M6E_AI_1.00.000019 —

References