CVE-2026-50227

MQTT WebSocket Command Execution Vulnerability in NitroSense

State: Published
Severity: 6.1 Medium
Published: Sep 23, 2026
Updated: Sep 23, 2026
Reserved: Jun 4, 2026

Description

An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoint in Acer NitroSense software (versions up to and including 5.2.62). This allows the attacker to invoke exposed ddsc RPC functions, including child_process.execSync(), resulting in arbitrary command execution in the application context.

Scores

CVSS	Score	Vector	Source
4.0	6.1 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U	Acer

Weaknesses

CWE-306 Missing Authentication for Critical Function
CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')

Affected Products

Product	Versions
NitroSense V5Acer	5.2.62 and earlierAffected

References

https://community.acer.com/en/kb/articles/20052

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.