This vulnerability (CVE-2026-50212) in the Acer Connect M6E 5G Portable WiFi Router arises from insufficient validation logic in the device dissociation API routines. A remote attacker can exploit this flaw to forcefully unbind user endpoints that are unrelated to them, leading to uncontrolled resource consumption and a denial of service condition. The CVSS 4.0 base score is 7.1, indicating high severity, with attack vector being adjacent network, no privileges or user interaction required, and high impact on availability. No official patch or remediation level has been provided by the vendor as of the published date.

Exploitation of this vulnerability allows a remote attacker on an adjacent network to cause a denial of service by forcibly disconnecting unrelated user endpoints from the router. This disrupts network availability for legitimate users, potentially causing significant service interruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No vendor-provided mitigation or temporary fix is currently documented.