CVE-2026-49191

Name: CVE-2026-49191 — Vulnerability Record
Brand: Quanteta Data Lab
SKU: CVE-2026-49191

CRITICAL

CVSS v3.1: 9.8 · EPSS: 0.0004 (12.7 percentile)

NetworkNo privilegesNo user interactionImproper Authentication

Source data as of: 2026-06-05 05:00:16 UTC

At a glance

Severity: CRITICAL
CVSS: 9.8 v3.1 · NVD
EPSS: 0.0004 (12.7 percentile) · FIRST.org
CISA KEV: No
Type: Improper Authentication · NVD CWE
Attack conditions (CVSS vector): NetworkNo privilegesNo user interaction · Source: NVD Vector
Affected vendors: acer
Published: 2026-06-04 · Modified: 2026-06-04
References: Jump to references (1)

CVSS v3.1 9.8 / 10 CRITICAL Source: NVD

CVSS v4.0 9.3 / 10 CRITICAL Source: NVD

EPSS 0.0004 12.7 percentile Source: FIRST.org

CISA KEV No Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

The production build of the M3WebServer hard-codes its backend API keys, which can be easily intercepted through verbose error handling pages.

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.