Auth bypass in Acer Connect M6e 5g Portable Wifi Router

CVE-2026-50225

The registration path /v1/account/register provides no bot mitigation mechanisms, allowing malicious automated systems to flood the database.

Vulnerability class: Broken Authentication

EPSS: 0.000 (12.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References