Skip to content
OpenAdvisories
High · 7.1 CVE-2026-50212 EUVD-2026-34224GHSA-5q75-v747-f499

Arbitrary Remote Device Unbinding

Published Jun 4, 2026 · Updated Jun 4, 2026 · Assigned by Acer

Description

Weak validation logic within device dissociation API routines allows a remote entity to forcefully unbind unrelated user endpoints, causing severe denial of service.

Affected products

VendorProductAffectedFixed
Acer Connect M6E 5G Portable WiFi Router ≤ M6E_AI_1.00.000019 —

References