CVE-2026-50605CWE-284broken-access-control

CVE-2026-50605

published September 17, 2026

CVSS
7.4
EPSS
0%
Percentile
2.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. Insufficient access controls within a privileged service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, this could lead to privilege escalation or compromise of the affected system.

The record
Technical detail
CVSS
7.4 · NONE
CVSS v4.0
7.4 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
EPSS
0.00130 · 2.4th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-09-17T12:17Z
References (1)
EPSS history
Timeline
  • 18 SEP 04:00Z
    EPSS moved — → 0%
    epss
  • 17 SEP 07:53Z
    Privilege Escalation Vulnerability in NitroSense and PredatorSense Software
    cvelistv5