PatchTheCVECVE-2026-50226: Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials fo
CVE-2026-50226 is a medium-severity flaw (CVSS 5.3) affecting connect m6e 5g firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials for arbitrary IMEI numbers. This allows unauthorized actors to list catalog items and extract protected binaries from pre-signed cloud links.
Why this priority
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 92%) |
| CISA exploited list | No |
| Weakness | CWE-321 |
| Published | 2026-06-04 |
| Last modified | 2026-07-22 |
Last updated 2026-07-22 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-50226?
connect m6e 5g firmware: upgrade to newer than m6e_ai_1.00.000019. Exact commands for each OS are on this page.
Is CVE-2026-50226 being exploited?
CVE-2026-50226 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-50226 affect?
CVE-2026-50226 affects connect m6e 5g firmware. Severity is medium (CVSS 5.3). Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials for arbitrary IMEI numbers. This allows unauthorized actors to list catalog items and extract protected binaries from pre-signed clo
How urgent is CVE-2026-50226?
Priority 26/100. Remotely exploitable, no login, no user action
Related CVEs
- CVE-2026-49185 CRITICAL 9.8 UPGRADE The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/i
- CVE-2026-49186 CRITICAL 9.8 UPGRADE The local MQTT broker does not enforce topic-level Access Control Lists (ACLs)
- CVE-2026-49188 CRITICAL 9.8 UPGRADE The ai_cmd utility executes with full root permissions
- CVE-2026-49191 CRITICAL 9.8 UPGRADE The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted throu
- CVE-2026-50211 CRITICAL 9.8 UPGRADE Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail builds, giving