Privilege Escalation Vulnerability in Acer NitroSense and PredatorSense
CVE-2026-50609

7.4HIGH

Key Information:

Vendor

Acer

Status
System Monitoring
Vendor
CVE Published:
17 September 2026

What is CVE-2026-50609?

A security flaw has been detected in the Acer System Monitoring component within NitroSense and PredatorSense software, whereby insufficient access controls in a privileged Named Pipe service allow an authenticated local user to conduct unauthorized registry operations. This vulnerability can potentially lead to the user gaining elevated access privileges, or compromise the integrity and security of the system in various contexts.

Affected Version(s)

System Monitoring * <= 1.0.19.2

References

https://community.acer.com/en/kb/articles/19876

CVSS V4

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Cassius GARAT
.