Cyber Resilience

CVE-2026-50207

HighUpdated

Published: 04 June 2026

Published
04 June 2026
Modified
17 June 2026
KEV Added
—
Patch
—
CVSS Score v4 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0013 3.2th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2026-50207 is a high-severity Path Traversal (CWE-22) vulnerability in Acer Connect M6E 5G Firmware. Its CVSS base score is 8.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Data from Local System (T1005); ranked at the 3.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

OWASP Top 10 for Web (2025)

A01:2025 Broken Access Control

EU & UK References

Vulnerability details

The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to read baseband files or disable cellular connectivity.

CWE(s)
CWE-22

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1005 Data from Local System Collection
Adversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior to Exfiltration.
attack.mitre.org →
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
attack.mitre.org →
Why these techniques?

Local unverified Binder pass-through enables unauthorized baseband file reads (T1005) and bypasses access controls for privileged actions (T1068).

Confidence: MEDIUM · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2026-49194Same product: Acer Connect M6E 5G
CVE-2026-49185Same product: Acer Connect M6E 5G
CVE-2026-50208Same product: Acer Connect M6E 5G
CVE-2026-50206Same product: Acer Connect M6E 5G
CVE-2026-49203Same product: Acer Connect M6E 5G
CVE-2026-50213Same product: Acer Connect M6E 5G
CVE-2026-49191Same product: Acer Connect M6E 5G
CVE-2026-49190Same product: Acer Connect M6E 5G
CVE-2026-49187Same product: Acer Connect M6E 5G
CVE-2026-49188Same product: Acer Connect M6E 5G

Affected Assets

acer
connect m6e 5g firmware
≤ m6e_ai_1.00.000019

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

SI-10 Information Input Validation
addresses: CWE-22

Validates pathnames and filenames to prevent traversal outside intended directories.

References