CVE-2026-49185

Severity

CRITICAL

CVSS

10.0

EPSS

0.00387

Risk score

40.14

CISA KEV

No

PoC

No

Published

2026-06-04

Modified

2026-06-04

First seen

2026-08-05

Aliases

EUVD-2026-34199, GHSA-78X5-76FX-MCP6

Products

Acer:Connect M6E 5G Portable WiFi Router * ≤M6E_AI_1.00.000019, acer:connect_m6e_5g, acer:connect_m6e_5g_firmware

Sources

The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/instruction injection.