Acer System Monitoring vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Acer System Monitoring: 5 record(s), with affected versions and fixes.
CVE-2026-50610
High · 7.4
CWE-284 Sep 17, 2026
Improper Access control Vulnerability in NitroSense and PredatorSense Software
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service. An authenticated local user may be able to access the service and perform unauthorized registry modifications, potentially resulting in local privilege escalation.
CVE-2026-50609
High · 7.4
CWE-284 Sep 17, 2026
Unauthorized Registry Modification Vulnerability in NitroSense and PredatorSense Software
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, this could lead to privilege escalation or compromise of the affected system.
CVE-2026-50608
Low · 1.2
CWE-306 Sep 17, 2026
Authentication Vulnerability in NitroSense and PredatorSense Software
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require authentication before allowing connections to the service. Under certain circumstances, unauthorized access to service functionality may be possible.
CVE-2026-50607
Low · 2.7
CWE-668 Sep 17, 2026
WebSocket Exposure Vulnerability in NitroSense and PredatorSense Software
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all network interfaces, which may expose the service to unintended network access.
CVE-2026-50606
Low · 1.2
CWE-321 Sep 17, 2026
Hard-coded Encryption Key Vulnerability in Acer System Monitoring for NitroSense and PredatorSense Software
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to access protected information or perform unauthorized actions.