Insufficient Access Controls in Acer System Monitoring Component of NitroSense and PredatorSense
CVE-2026-50610

7.4HIGH

Key Information:

Vendor

Acer

Status
System Monitoring
Vendor
CVE Published:
17 September 2026

What is CVE-2026-50610?

A vulnerability has been identified within the Acer System Monitoring component found in both NitroSense and PredatorSense applications. This issue arises from inadequate access controls in a privileged service, allowing authenticated local users to exploit the vulnerability. By doing so, they can potentially gain unauthorized access to the service, which may lead to registry modifications and grant them higher privileges than intended.

Affected Version(s)

System Monitoring Windows * <= 1.0.19.2

References

https://community.acer.com/en/kb/articles/19877

CVSS V4

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Cassius GARAT
.