CM
Product
Connect M6e 5g Firmware
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 12Medium 6Low 0
Watch
Add Connect M6e 5g Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-50214 | 9.8 | Jun 4 | Shared Secret Quota Inflation Affected: through m6e_ai_1.00.000019 |
| CVE-2026-50211 | 9.8 | Jun 4 | Exposed Factory Testing App Boundaries Affected: through m6e_ai_1.00.000019 |
| CVE-2026-49191 | 9.8 | Jun 4 | Exposed Hard-coded M3WebServer Backend API Key Affected: through m6e_ai_1.00.000019 |
| CVE-2026-49188 | 9.8 | Jun 4 | Elevated Root Command Execution via ai_cmd Sockets Affected: through m6e_ai_1.00.000019 |
| CVE-2026-49186 | 9.8 | Jun 4 | Lack of MQTT Broker Topic Access Control Lists Affected: through m6e_ai_1.00.000019 |
| CVE-2026-49185 | 9.8 | Jun 4 | Instruction Injection via FieldX MDM Affected: through m6e_ai_1.00.000019 |
| CVE-2026-50208 | 9.4 | Jun 4 | Permissive TrustAllCerts TLS Verification Affected: through m6e_ai_1.00.000019 |
| CVE-2026-50225 | 9.1 | Jun 4 | Account Creation Exhaustion Affected: through m6e_ai_1.00.000019 |
| CVE-2026-49194 | 8.8 | Jun 4 | SCREEN_CLICK Authentication Bypass Affected: through m6e_ai_1.00.000019 |
| CVE-2026-49190 | 8.8 | Jun 4 | Missing Per-Instruction Authorization Checks Affected: through m6e_ai_1.00.000019 |
| CVE-2026-49202 | 8.6 | Jun 4 | Unverified Meeting Recording Endpoints & Permissive CORS Affected: through m6e_ai_1.00.000019 |
| CVE-2026-49203 | 8.3 | Jun 4 | Unauthenticated eSIM Configuration Manipulation Affected: through m6e_ai_1.00.000019 |
| CVE-2026-50205 | 8.2 | Jun 4 | Plaintext Log Credential Leakage Affected: through m6e_ai_1.00.000019 |
| CVE-2026-50209 | 7.8 | Jun 4 | MDM Server Registration Overriding Affected: through m6e_ai_1.00.000019 |
| CVE-2026-50207 | 7.8 | Jun 4 | Local Modem Manipulation via Binder Interfaces Affected: through m6e_ai_1.00.000019 |
| CVE-2026-49189 | 7.8 | Jun 4 | Broadcast Receiver Privilege Escalation Affected: through m6e_ai_1.00.000019 |
| CVE-2026-50213 | 7.5 | Jun 4 | Bulk User Private Data Harvesting Affected: through m6e_ai_1.00.000019 |
| CVE-2026-50210 | 7.5 | Jun 4 | Weak Static Cryptographic Initialization Vectors Affected: through m6e_ai_1.00.000019 |
| CVE-2026-49193 | 7.5 | Jun 4 | Publicly Readable AWS S3 Telemetry Buckets Affected: through m6e_ai_1.00.000019 |
| CVE-2026-49187 | 7.5 | Jun 4 | Hard-coded APK Resource Credentials & Scepters Affected: through m6e_ai_1.00.000019 |
| CVE-2026-50206 | 6.8 | Jun 4 | VPN Command Injection Vulnerability Affected: through m6e_ai_1.00.000019 |
| CVE-2026-50212 | 6.5 | Jun 4 | Arbitrary Remote Device Unbinding Affected: through m6e_ai_1.00.000019 |
| CVE-2026-49204 | 6.5 | Jun 4 | Hard-coded AWS Cognito Testing Accounts Affected: through m6e_ai_1.00.000019 |
| CVE-2026-49192 | 5.4 | Jun 4 | Summary Service Insecure Direct Object Reference Affected: through m6e_ai_1.00.000019 |
| CVE-2026-50226 | 5.3 | Jun 4 | Firmware Theft & IMEI Spoofing via Connect-OTA Affected: through m6e_ai_1.00.000019 |
| CVE-2026-50224 | 4.9 | Jun 4 | Unauthenticated IPv6 WAN Management Exposure Affected: through m6e_ai_1.00.000019 |
Showing 26