Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-50224 EUVD-2026-34229GHSA-569c-634x-7vch

Unauthenticated IPv6 WAN Management Exposure

Published Jun 4, 2026 · Updated Jun 4, 2026 · Assigned by Acer

Description

The web administration panel binds broadly to the public IPv6 address space on port [::]:8080 without default firewall limits, making internal API endpoints reachable over the WAN.

Affected products

VendorProductAffectedFixed
Acer Connect M6E 5G Portable WiFi Router ≤ M6E_AI_1.00.000019 —

References