This vulnerability (CVE-2026-49193) affects the Acer Connect M6E 5G Portable WiFi Router. Due to overly permissive cloud storage container configurations, active telemetry information is exposed publicly on the internet. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). The CVSS 4.0 base score is 8.7, indicating high severity, with network attack vector, no required privileges or user interaction, and high impact on confidentiality. No remediation level or patch information is currently provided by the vendor.

The vulnerability allows unauthorized actors to access sensitive telemetry data from the affected device due to misconfigured cloud storage permissions. This exposure could lead to information disclosure that may assist attackers in further targeting or profiling the device or its user environment. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or configuration update is provided by Acer, users should monitor vendor communications for updates. No specific mitigation steps are documented by the vendor at this time.