← Database

CVE-2026-50214

CRITICAL CVSS: 9.8 Published: 2026-06-04 Modified: 2026-07-22

Description

The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing arbitrary creation of zero-cost network access plans.

Affected Platforms

Acer Connect M6E 5GAcer Connect M6E 5G Firmware

Weakness Type

CWE-345

References