← CVE Intelligence

CVE-2026-49191

Exposed Hard-coded M3WebServer Backend API Key PUBLISHED

Description (CNA)

The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling pages.

Affected (CNA)

Vendor / productVersions
Acer / Connect M6E 5G Portable WiFi Routeraffected * through M6E_AI_1.00.000019

CWE

CWE-287

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.