CVE-2026-50226 describes a cryptographic vulnerability in the Acer Connect M6E 5G Portable WiFi Router where fixed AES-128-CBC keys are hard-coded within the AcerConnect OTA application. This weakness permits attackers to forge authorization credentials tied to arbitrary IMEI numbers. Exploiting this, unauthorized actors can list catalog items and extract protected binaries from pre-signed cloud links associated with the device. The vulnerability is scored 6.9 (medium) under CVSS 4.0 with network attack vector, low complexity, and no privileges or user interaction required. No vendor advisory or patch information is currently available.

An attacker can leverage the hard-coded cryptographic keys to forge authorization credentials for any IMEI number, bypassing intended access controls. This enables unauthorized access to catalog listings and extraction of protected binaries from cloud resources, potentially leading to information disclosure or unauthorized firmware/software retrieval. There is no indication of privilege escalation or direct device compromise from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for vendor updates. No specific mitigations or workarounds are provided in the available data.