CVE-2026-49192

Summary Service Insecure Direct Object Reference PUBLISHED

Description (CNA)

The summary service endpoint suffers from an IDOR vulnerability where it fails to verify user ownership of hardware serial numbers, exposing device data to scraping.

Affected (CNA)

Vendor / product	Versions
Acer / Connect M6E 5G Portable WiFi Router	affected * through M6E_AI_1.00.000019

CWE

CWE-639

References

https://community.acer.com/en/kb/articles/19707

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.