CVE-2026-50205: Plaintext Log Credential Leakage

Synopsis

A plaintext credential disclosure vulnerability affects the Acer Connect M6E 5G Portable WiFi Router (firmware version M6E_AI_1.00.000019 and earlier). The router writes SMTP server authentication passwords and sensitive employee corporate identification data in cleartext to system log files, accessible over the network without any authentication. An attacker who can reach the device can read stored credentials and personal identification data directly from logs. No fix version has been published; HarborGuard tracks the advisory and will surface a patched rebuild the moment Acer releases one.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must be able to reach the router's log interface over the network; the vulnerability is exposed remotely without requiring physical or local access.

• AuthenticationNot required

  No credentials or account are needed to exploit this vulnerability; the log files containing plaintext credentials are accessible anonymously.

• Victim interactionNot required

  No user action is required; the attacker can retrieve the exposed log data without any victim participation.

• Attack complexityDetail

  Exploitation is straightforward and condition-free; no race conditions, memory layout dependencies, or environmental prerequisites stand in the attacker's way.

Blast Radius

• Reads SMTP server authentication passwords stored in plaintext within system log files, enabling direct reuse of those credentials against the associated mail server.
• Reads sensitive employee corporate identification data written to the same logs, exposing personal or organizational records to the attacker.
• Harvested SMTP credentials can be used to send mail as a trusted internal sender, enabling phishing or data exfiltration campaigns from a legitimate account.