Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-50214 EUVD-2026-34228GHSA-w6gp-x68f-qxch

Shared Secret Quota Inflation

Published Jun 4, 2026 · Updated Jun 4, 2026 · Assigned by Acer

Description

The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing arbitrary creation of zero-cost network access plans.

Affected products

VendorProductAffectedFixed
Acer Connect M6E 5G Portable WiFi Router ≤ M6E_AI_1.00.000019 —

References