Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-50209 EUVD-2026-34221GHSA-jwpr-997h-4qrm

MDM Server Registration Overriding

Published Jun 4, 2026 · Updated Jun 4, 2026 · Assigned by Acer

Description

Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting administrative ownership to an external attacker.

Affected products

VendorProductAffectedFixed
Acer Connect M6E 5G Portable WiFi Router ≤ M6E_AI_1.00.000019 —

References