Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-50210 EUVD-2026-34222GHSA-6x2q-59q4-vhpj

Weak Static Cryptographic Initialization Vectors

Published Jun 4, 2026 · Updated Jun 4, 2026 · Assigned by Acer

Description

The device encrypts data using AES-CBC with static zero-filled Initialization Vectors (IVs), making it susceptible to replay attacks and known-plaintext decryption.

Affected products

VendorProductAffectedFixed
Acer Connect M6E 5G Portable WiFi Router ≤ M6E_AI_1.00.000019 —

References