critical9.8
CVE-2026-49191
The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling pages.
Impact
The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling pages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acer | Connect M6e 5g Firmware | through m6e_ai_1.00.000019 |