This vulnerability (CVE-2026-50208) affects the Acer Connect M6E 5G Portable WiFi Router. It arises from the use of TrustAllCerts routines that bypass standard TLS certificate validation, combined with hard-coded DES encryption keys. These weaknesses enable an attacker positioned as a MITM to decrypt network traffic, compromising confidentiality. The CVSS 4.0 base score is 9.2, indicating critical severity. There is no vendor advisory or patch information available, and the remediation level is not specified.

An attacker capable of performing a Man-in-the-Middle attack could exploit this vulnerability to decrypt network traffic transmitted by the affected device. This compromises the confidentiality and integrity of communications over the router. The use of hard-coded encryption keys and disabled TLS validation significantly lowers the security posture of the device.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider avoiding use of the affected device in sensitive environments or employ additional network-layer encryption measures. Monitor official Acer communications for updates.