Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-49203

Unauthenticated eSIM Configuration Manipulation

Description

Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be rewritten or deleted.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Acer Connect M6E 5G Portable WiFi Router

Default version status: unaffected

  • * to ≤ M6E_AI_1.00.000019affected

References