This vulnerability (CVE-2026-49193) concerns the Acer Connect M6E 5G Portable WiFi Router and arises from overly permissive cloud storage container configurations. These misconfigurations result in active telemetry information being publicly accessible over the internet, constituting an exposure of sensitive information (CWE-200) to unauthorized actors. The CVSS 4.0 base score is 8.7, indicating high severity, with network attack vector, no required privileges or user interaction, and high impact on confidentiality. No remediation level or patch information is currently available, and no known exploits are reported in the wild.

The vulnerability exposes active telemetry data from the affected device to unauthorized parties due to misconfigured cloud storage permissions. This could lead to leakage of sensitive operational information about the device or network environment. The confidentiality impact is high, but integrity and availability impacts are not indicated. There is no indication of required privileges or user interaction for exploitation, increasing the risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Acer's advisories for updates. Until a fix is available, reviewing and securing cloud storage container permissions related to the device telemetry data is recommended if possible.