CVE-2026-50213

Bulk User Private Data Harvesting PUBLISHED

Description (CNA)

The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating predictable identification strings.

Affected (CNA)

Vendor / product	Versions
Acer / Connect M6E 5G Portable WiFi Router	affected * through M6E_AI_1.00.000019

CWE

CWE-798

References

https://community.acer.com/en/kb/articles/19707

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.