CVE-2026-50604CWE-306

CVE-2026-50604

published September 17, 2026

CVSS
4.9
EPSS
0%
Percentile
10.1
In the wild
Unconfirmed
What it is

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The socket handshake process does not properly require authentication before granting access to the service. Under certain circumstances, an unauthorized connection may be established, potentially allowing access to functionality that should be restricted.

The record
Technical detail
CVSS
4.9 · NONE
CVSS v4.0
4.9 · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
EPSS
0.00206 · 10.1th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-09-17T09:17Z
References (1)
EPSS history
Timeline
  • 18 SEP 04:00Z
    EPSS moved — → 0%
    epss
  • 17 SEP 04:06Z
    Unauthenticated Access Vulnerability in NitroSense and PredatorSense Software
    cvelistv5