Skip to content
OpenAdvisories
High · 8.7 CVE-2026-50213 EUVD-2026-34225GHSA-6gcf-89c7-vx3x

Bulk User Private Data Harvesting

Published Jun 4, 2026 · Updated Jun 4, 2026 · Assigned by Acer

Description

The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating predictable identification strings.

Affected products

VendorProductAffectedFixed
Acer Connect M6E 5G Portable WiFi Router ≤ M6E_AI_1.00.000019 —

References