Debugging Routine Vulnerability in Acer Devices Allowing Shell Access
CVE-2026-49194

9.4CRITICAL

Key Information:

Vendor

Acer

Status
Connect M6e 5g Portable Wifi Router
Vendor
CVE Published:
4 June 2026

What is CVE-2026-49194?

A vulnerability in certain Acer devices allows unauthorized users to bypass the standard device login prompt through the SCREEN_CLICK(5053) debugging routine. This flaw enables direct access to an interactive shell interface, potentially exposing the device to unauthorized control and misuse. Users are advised to review their device configurations and apply necessary security measures to mitigate the risks associated with this vulnerability.

Affected Version(s)

Connect M6E 5G Portable WiFi Router *

References

https://community.acer.com/en/kb/articles/19707

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ta-Lun Yen
.