CVE-2026-50205 describes a vulnerability in the Acer Connect M6E 5G Portable WiFi Router where system log files contain unencrypted SMTP server authentication passwords along with sensitive employee corporate identification data. This represents an information exposure risk due to improper handling of sensitive data in logs. The vulnerability has a CVSS 4.0 score of 8.8, indicating high severity with network attack vector, no privileges or user interaction required, and high confidentiality impact. No vendor advisory or patch information is currently available.

Exposure of unencrypted SMTP authentication credentials and sensitive employee identification data in system logs can lead to unauthorized access to email servers and compromise of employee privacy. This may facilitate further attacks leveraging stolen credentials or sensitive corporate information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to system log files to trusted administrators only and consider disabling or limiting logging of sensitive information if configurable.