Acer System Monitoring vulnerabilities

5 vulnerabilities

Known vulnerabilities in Acer System Monitoring, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

2.7CVE-2026-50607acersystem monitoring
EPSS score
0.43%
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all network interfaces, which may expose the service to unintended network access.1.2CVE-2026-50606acersystem monitoring
EPSS score
0.10%
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to access protected information or perform unauthorized actions.7.4CVE-2026-50610acersystem monitoring
EPSS score
0.13%
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service. An authenticated local user may be able to access the service and perform unauthorized registry modifications, potentially resulting in local privilege escalation.7.4CVE-2026-50609acersystem monitoring
EPSS score
0.13%
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, this could lead to privilege escalation or compromise of the affected system.1.2CVE-2026-50608acersystem monitoring
EPSS score
0.21%
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require authentication before allowing connections to the service. Under certain circumstances, unauthorized access to service functionality may be possible.