Exposed Hard-coded M3WebServer Backend API Key
CVE-2026-49191

9.3CRITICAL

Key Information:

What is CVE-2026-49191?

The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling pages.

Connect M6E 5G Portable WiFi Router *

Score:

9.3

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Ta-Lun Yen

CVE-2026-49191 Data