What’s Vulnerable › Vulnerabilities
CVE-2026-50604: Unauthenticated Access Vulnerability in NitroSense and PredatorSense Software
- Severity: medium (CVSS 4.9 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-17 · updated 2026-09-18
- Weakness: CWE-306
Description
A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The socket handshake process does not properly require authentication before granting access to the service. Under certain circumstances, an unauthorized connection may be established, potentially allowing access to functionality that should be restricted.
Affected products
- Acer Agent Service: through 1.2.110.2
References
Get alerted when CVE-2026-50604 or the next vulnerability affects your stack