← Database

CVE-2026-49191

CRITICAL CVSS: 9.8 Published: 2026-06-04 Modified: 2026-07-22

Description

The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling pages.

Affected Platforms

Acer Connect M6E 5GAcer Connect M6E 5G Firmware

Weakness Type

CWE-287

References