CVE-2026-50209: MDM Server Registration Overriding
Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting administrative ownership to an external attacker.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Prevent broadcast events from rewriting the device's default MDM endpoint address; disable any ability for broadcasts to change the configured MDM server to avoid transfer of administrative ownership.
Mobile Device Management (MDM) registration allow_broadcast_mdm_endpoint_override = false
Event History
Frequently Asked Questions
What is the severity of CVE-2026-50209?
CVE-2026-50209 has a critical severity rating of 9.3.
How do I fix CVE-2026-50209?
To fix CVE-2026-50209, update the Acer Connect M6e 5g Firmware to the latest version provided by Acer.
What type of vulnerability is CVE-2026-50209?
CVE-2026-50209 is a vulnerability that allows unauthorized MDM server registration overriding.
What could an attacker do using CVE-2026-50209?
An attacker could use CVE-2026-50209 to gain administrative control over a device by altering its MDM endpoint address.
Which software is affected by CVE-2026-50209?
CVE-2026-50209 affects the Acer Connect M6e 5g Firmware.