CVE-2026-50604
Unauthenticated Access Vulnerability in NitroSense and PredatorSense Software
- State
- Published
- Severity
- 4.9 Medium
- Published
- Sep 17, 2026
- Updated
- Sep 17, 2026
- Reserved
- Jun 5, 2026
Description
A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The socket handshake process does not properly require authentication before granting access to the service. Under certain circumstances, an unauthorized connection may be established, potentially allowing access to functionality that should be restricted.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.9 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:U | Acer |
Weaknesses
- CWE-306 Missing Authentication for Critical Function
Affected Products
| Product | Versions |
|---|---|
Agent ServiceAcer |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.