CVE-2026-49203

Unauthenticated eSIM Configuration Manipulation PUBLISHED

Description (CNA)

Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be rewritten or deleted.

Affected (CNA)

Vendor / product	Versions
Acer / Connect M6E 5G Portable WiFi Router	affected * through M6E_AI_1.00.000019

CWE

CWE-287

References

https://community.acer.com/en/kb/articles/19707

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.