Unencrypted SMTP Server Password Exposure in Acer Products
CVE-2026-50205

8.8HIGH

Key Information:

Vendor

Acer

Vendor
CVE Published:
4 June 2026

What is CVE-2026-50205?

This vulnerability pertains to Acer systems where system log files inadvertently expose unencrypted SMTP server authentication passwords, creating potential security risks. In addition, sensitive employee corporate identification information is also compromised, leading to serious implications for data confidentiality. Organizations using affected Acer products must take immediate action to secure their systems and mitigate the associated risks.

Affected Version(s)

Connect M6E 5G Portable WiFi Router *

References

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ta-Lun Yen
.