CVE-2026-50212 in Connect M6E 5G Portable WiFi Router

Summary

by MITRE • 06/04/2026

Weak validation logic within device dissociation API routines allows a remote entity to forcefully unbind unrelated user endpoints, causing severe denial of service.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsible: Acer
• Reservation: 06/04/2026
• Disclosure: 06/04/2026
• Moderation: accepted
• Entry: VDB-368282
• CPE: ready
• CWE: CWE-400 (confirmed)
• CVSS: 6.5 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Hospital, Lawfirm, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-50212
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-50212
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-50212/