CVE-2026-49185: Instruction Injection via FieldX MDM

Synopsis

Command injection in the Acer FieldX MDM component of the Connect M6E 5G Portable WiFi Router allows a remote, unauthenticated attacker to execute arbitrary operating system commands by sending a crafted payload to the adb messaging topic, which is passed without sanitization directly into Runtime.exec(). The attack requires no authentication and no victim interaction, making it exploitable by anyone who can reach the device over the network. Successful exploitation gives the attacker full control over the device, including read, write, and denial-of-service capabilities on both the local system and dependent network services. HarborGuard is tracking this advisory and will make a patched-image rebuild available the moment an upstream fix is published.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the device's adb messaging endpoint over the network; the AV:N vector means no local or physical access is needed.

• AuthenticationNot required

  No credentials or account of any privilege level are required to deliver the malicious payload.

• Victim interactionNot required

  The attack is entirely server-side; no user on the target device needs to click, open, or approve anything.

• Attack complexityDetail

  Exploitation is reliable and condition-free: no race conditions, memory-layout dependencies, or special environmental factors need to be satisfied (AC:L, AT:N).

Blast Radius

• The attacker executes arbitrary OS commands as the process owner of the MDM runtime, gaining a shell on the router.
• All data stored on or transiting the device is readable, including credentials, VPN configurations, and connected-client traffic metadata.
• The attacker can modify device configuration, inject routing rules, or install persistent backdoors affecting every client on the WiFi segment.
• The device can be crashed or rendered inoperable, disrupting network connectivity for all clients relying on the router for 5G access.