A vulnerability was found in Acer Connect M6E 5G Portable WiFi Router up to M6E_AI_1.00.000019 and classified as critical. Affected is the function
Runtime.exec. Such manipulation leads to os command injection.
This vulnerability is documented as CVE-2026-49185. The attack can be executed remotely. There is not any exploit available.