CVE-2026-49188 | BDVDB-2026-338124 Detail
AcerConnect M6E 5G Portable WiFi Router
Description#
The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), paving the way for unauthenticated users to execute arbitrary root commands.
Impact#
CAPEC-248: Command Injection
Weaknesses#
- CWE-489 Active Debug Code
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.