CVE-2026-50206

Summary

Incoming VPN network profile settings fail to process special characters safely, enabling command injection via malicious config files.

Affected Software

VendorProductVersion RangeStatus
AcerConnect M6E 5G Portable WiFi Router* <= M6E_AI_1.00.000019affected

Weaknesses

  • CWE-78: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References