# Acer vulnerabilities Source: https://junglewise.ai/threats/vendors/acer Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/acer.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 49 vulnerabilities in Acer: 0 in the last 7 days and 12 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-50228, was published on 23 September 2026. Nothing in the last four weeks, down from 10 vulnerabilities in the four before. 4 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 12 - All time: 49 (0 critical, 0 exploited in the wild) ## About Acer A multinational technology corporation specializing in advanced electronics and computer hardware. ## Latest Acer vulnerabilities - [CVE-2026-50228: Acer NitroSense arbitrary code execution via exposed DevTools](https://junglewise.ai/threats/cve-2026-50228-an-unauthenticated-local-attacker-can-connect-to-the-electron) (info, published 23 Sep 2026) - [CVE-2026-50227: Acer NitroSense MQTT broker authentication bypass](https://junglewise.ai/threats/cve-2026-50227-an-unauthenticated-local-attacker-can-connect-to-the-mqtt-broker) (info, published 23 Sep 2026) - [CVE-2026-50610: Acer NitroSense privilege escalation via System Monitoring](https://junglewise.ai/threats/cve-2026-50610-acer-nitrosense-privilege-escalation-via-system-monitoring) (info, published 17 Sep 2026) - [CVE-2026-50609: Acer System Monitoring insufficient access control in Named Pipe service](https://junglewise.ai/threats/cve-2026-50609-acer-system-monitoring-insufficient-access-control-in-named-pipe) (info, published 17 Sep 2026) - [CVE-2026-50608: Acer NitroSense authentication bypass in WebSocket handshake](https://junglewise.ai/threats/cve-2026-50608-acer-nitrosense-authentication-bypass-in-websocket-handshake) (info, published 17 Sep 2026) - [CVE-2026-50607: Acer NitroSense WebSocket service exposure on all network interfaces](https://junglewise.ai/threats/cve-2026-50607-acer-nitrosense-websocket-service-exposure-on-all-network) (info, published 17 Sep 2026) - [CVE-2026-50606: Acer NitroSense and PredatorSense hard-coded encryption key](https://junglewise.ai/threats/cve-2026-50606-acer-nitrosense-and-predatorsense-hard-coded-encryption-key) (info, published 17 Sep 2026) - [CVE-2026-50605: Acer Agent Service insufficient access control in registry operations](https://junglewise.ai/threats/cve-2026-50605-acer-agent-service-insufficient-access-control-in-registry) (info, published 17 Sep 2026) - [CVE-2026-50604: Acer Agent Service authentication bypass in socket handshake](https://junglewise.ai/threats/cve-2026-50604-acer-agent-service-authentication-bypass-in-socket-handshake) (info, published 17 Sep 2026) - [CVE-2026-50603: Acer NitroSense and PredatorSense hardcoded encryption key](https://junglewise.ai/threats/cve-2026-50603-acer-nitrosense-and-predatorsense-hardcoded-encryption-key) (info, published 17 Sep 2026) - [CVE-2026-50602: Acer Planet9 privilege escalation via incorrect file permissions](https://junglewise.ai/threats/cve-2026-50602-acer-planet9-privilege-escalation-via-incorrect-file-permissions) (info, published 17 Aug 2026) - [CVE-2026-50601: Acer Planet9 hardcoded API key exposure](https://junglewise.ai/threats/cve-2026-50601-acer-planet9-hardcoded-api-key-exposure) (info, published 17 Aug 2026) - [CVE-2026-50226: Acer Connect M6E hard-coded AES keys in OTA application](https://junglewise.ai/threats/cve-2026-50226-acer-connect-m6e-hard-coded-aes-keys-in-ota-application) (info, CVSS 6.9, published 4 Jun 2026) - [CVE-2026-50225: Acer Connect M6E missing bot mitigation in registration endpoint](https://junglewise.ai/threats/cve-2026-50225-acer-connect-m6e-missing-bot-mitigation-in-registration-endpoint) (info, CVSS 8.8, published 4 Jun 2026) - [CVE-2026-50224: Acer Connect M6E 5G Router Information Exposure in Web Admin Panel](https://junglewise.ai/threats/cve-2026-50224-acer-connect-m6e-5g-router-information-exposure-in-web-admin) (info, CVSS 6.9, published 4 Jun 2026) - [CVE-2026-50214: Acer Connect M6E shared global API token in /v1/Plan service](https://junglewise.ai/threats/cve-2026-50214-acer-connect-m6e-shared-global-api-token-in-v1-plan-service) (info, CVSS 9.3, published 4 Jun 2026) - [CVE-2026-50213: Acer Connect M6E IDOR in account validation endpoint](https://junglewise.ai/threats/cve-2026-50213-acer-connect-m6e-idor-in-account-validation-endpoint) (info, CVSS 8.7, published 4 Jun 2026) - [CVE-2026-50212: Acer Connect M6E 5G Router denial of service in dissociation API](https://junglewise.ai/threats/cve-2026-50212-acer-connect-m6e-5g-router-denial-of-service-in-dissociation-api) (info, CVSS 7.1, published 4 Jun 2026) - [CVE-2026-50211: Acer Connect M6E exposed engineering diagnostics in firmware](https://junglewise.ai/threats/cve-2026-50211-acer-connect-m6e-exposed-engineering-diagnostics-in-firmware) (info, CVSS 8.8, published 4 Jun 2026) - [CVE-2026-50210: Acer Connect M6E 5G Router weak encryption via static IVs](https://junglewise.ai/threats/cve-2026-50210-acer-connect-m6e-5g-router-weak-encryption-via-static-ivs) (info, CVSS 6.9, published 4 Jun 2026) - [CVE-2026-50209: Acer Connect M6E MDM hijacking via Broadcast Receiver privilege escalation](https://junglewise.ai/threats/cve-2026-50209-acer-connect-m6e-mdm-hijacking-via-broadcast-receiver-privilege) (info, CVSS 9.3, published 4 Jun 2026) - [CVE-2026-50208: Acer Connect M6E TLS validation bypass and hard-coded keys](https://junglewise.ai/threats/cve-2026-50208-acer-connect-m6e-tls-validation-bypass-and-hard-coded-keys) (info, CVSS 9.2, published 4 Jun 2026) - [CVE-2026-50207: Acer Connect M6E unverified AT commands in Binder boundary](https://junglewise.ai/threats/cve-2026-50207-acer-connect-m6e-unverified-at-commands-in-binder-boundary) (info, CVSS 8.5, published 4 Jun 2026) - [CVE-2026-50206: Acer Connect M6E command injection in VPN profile settings](https://junglewise.ai/threats/cve-2026-50206-acer-connect-m6e-command-injection-in-vpn-profile-settings) (info, CVSS 8.5, published 4 Jun 2026) - [CVE-2026-50205: Acer Connect M6E sensitive information disclosure in system logs](https://junglewise.ai/threats/cve-2026-50205-acer-connect-m6e-sensitive-information-disclosure-in-system-logs) (info, CVSS 8.8, published 4 Jun 2026) ## Most severe Acer vulnerabilities - [CVE-2026-8069: Acer PredatorSense privilege escalation in Windows Named Pipe](https://junglewise.ai/threats/cve-2026-8069-acer-predatorsense-privilege-escalation-in-windows-named-pipe) (high, CVSS 7.8, published 8 May 2026) - [CVE-2026-49185: Acer Connect M6E Command Injection in FieldX MDM](https://junglewise.ai/threats/cve-2026-49185-acer-connect-m6e-command-injection-in-fieldx-mdm) (info, CVSS 10, published 4 Jun 2026) - [CVE-2026-49201: Acer Wave 7 Router hardcoded AES key in upload.cgi](https://junglewise.ai/threats/cve-2026-49201-acer-wave-7-router-hardcoded-aes-key-in-upload-cgi) (info, CVSS 10, published 29 May 2026) - [CVE-2026-49200: Acer Wave 7 Router information disclosure in acer_cgi.log](https://junglewise.ai/threats/cve-2026-49200-acer-wave-7-router-information-disclosure-in-acer-cgi-log) (info, CVSS 10, published 29 May 2026) - [CVE-2026-49199: Acer Connect W6x command injection in MQTT broker](https://junglewise.ai/threats/cve-2026-49199-acer-connect-w6x-command-injection-in-mqtt-broker) (info, CVSS 10, published 29 May 2026) - [CVE-2026-49197: Acer Connect W6x Router authentication bypass in app endpoints](https://junglewise.ai/threats/cve-2026-49197-acer-connect-w6x-router-authentication-bypass-in-app-endpoints) (info, CVSS 10, published 29 May 2026) - [CVE-2026-49194: Acer Connect M6E authentication bypass via SCREEN_CLICK debugging routine](https://junglewise.ai/threats/cve-2026-49194-acer-connect-m6e-authentication-bypass-via-screen-click-debugging) (info, CVSS 9.4, published 4 Jun 2026) - [CVE-2026-49190: Acer Connect M6E missing authorization for internal opcodes](https://junglewise.ai/threats/cve-2026-49190-acer-connect-m6e-missing-authorization-for-internal-opcodes) (info, CVSS 9.4, published 4 Jun 2026) - [CVE-2026-50214: Acer Connect M6E shared global API token in /v1/Plan service](https://junglewise.ai/threats/cve-2026-50214-acer-connect-m6e-shared-global-api-token-in-v1-plan-service) (info, CVSS 9.3, published 4 Jun 2026) - [CVE-2026-50209: Acer Connect M6E MDM hijacking via Broadcast Receiver privilege escalation](https://junglewise.ai/threats/cve-2026-50209-acer-connect-m6e-mdm-hijacking-via-broadcast-receiver-privilege) (info, CVSS 9.3, published 4 Jun 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 10 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 2 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 8 | 0 | 0 | | 21 Sep 2026 | 2 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Acer technologies - [Acer Connect M6E 5G Portable WiFi Router](https://junglewise.ai/threats/technologies/connect-m6e-5g-portable-wifi-router): 26 vulnerabilities - [Acer NitroSense](https://junglewise.ai/threats/technologies/nitrosense): 13 vulnerabilities - [Acer Predatorsense](https://junglewise.ai/threats/technologies/predatorsense): 9 vulnerabilities - [Acer Connect W6x Router](https://junglewise.ai/threats/technologies/connect-w6x-router): 5 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Acer vulnerabilities", https://junglewise.ai/threats/vendors/acer, 9 November 2026.