← Database

CVE-2026-49203

HIGH CVSS: 8.3 Published: 2026-06-04 Modified: 2026-07-22

Description

Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be rewritten or deleted.

Affected Platforms

Acer Connect M6E 5GAcer Connect M6E 5G Firmware

Weakness Type

CWE-287

References