CVE-2026-49203EPSS p6.5%
CVE-2026-49203CVE-2026-49203
acer / connect_m6e_5g_firmware
Description
Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be rewritten or deleted.
Scoring
| CVSS | 8.3 () |
| Vector | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H |
| EPSS | 0.17% probability of exploitation · percentile 6.5% · 2026-08-03T12:00:16Z |
| Last modified | 2026-07-22 |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.