CVE 8.7 HIGH

Bulk User Private Data Harvesting_CVE-2026-50213

8.7 / 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Description

The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating predictable identification strings.

AI Analysis

Acer Connect M6E 5G Portable WiFi Router is vulnerable to bulk user private data harvesting due to an insecure account validation endpoint.

Basic Information

ID CVE-2026-50213
Source Acer
Published Jun 4, 2026 at 07:39

Affected Product

Vendor Acer
Product Connect M6E 5G Portable WiFi Router
Version *
Affected Versions Acer Connect M6E 5G Portable WiFi Router *

CWE Classification

AI Assessment

AI Score 8.7 / 10
AI Severity High
Vendor Acer
Product Connect M6E 5G Portable WiFi Router
Version *

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.