critical9.8
CVE-2026-50214
The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing arbitrary creation of zero-cost network access p…
Impact
The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing arbitrary creation of zero-cost network access plans.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acer | Connect M6e 5g Firmware | through m6e_ai_1.00.000019 |