Inadequate Bot Mitigation in Acer's Registration Path
CVE-2026-50225

8.8HIGH

Key Information:

Vendor

Acer

Status
Connect M6e 5g Portable Wifi Router
Vendor
CVE Published:
4 June 2026

What is CVE-2026-50225?

The registration endpoint /v1/account/register within Acer's product lacks adequate bot mitigation mechanisms. This oversight allows malicious automated systems to excessively flood the database, potentially leading to data integrity issues and performance degradation. Implementing robust bot prevention strategies is crucial to safeguard against such automated attacks.

Affected Version(s)

Connect M6E 5G Portable WiFi Router *

References

https://community.acer.com/en/kb/articles/19707

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ta-Lun Yen
.