This vulnerability (CVE-2026-49187) affects the Acer Connect M6E 5G Portable WiFi Router. It involves exposure of sensitive information (CWE-200) because the device uses hard-coded APK resource files that do not expire and a shared scepter mechanism, which results in information leaks and potential misuse by unauthorized parties. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality. There is no vendor advisory or patch available at this time.

The vulnerability allows an attacker to gain access to sensitive information from the device without any privileges or user interaction, potentially leading to information leaks and misuse. The high CVSS score reflects significant confidentiality impact, but no integrity or availability impact is indicated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation is currently available, monitor vendor communications for updates. Avoid exposing the device to untrusted networks where possible until a fix is released.