CVE-2026-50608CWE-306

CVE-2026-50608

published September 17, 2026

CVSS
1.2
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require authentication before allowing connections to the service. Under certain circumstances, unauthorized access to service functionality may be possible.

The record
Technical detail
CVSS
1.2 · NONE
CVSS v4.0
1.2 · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U
EPSS
0.00207 · 10.2th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-09-17T13:16Z
References (1)
EPSS history
Timeline
  • 18 SEP 04:00Z
    EPSS moved — → 0%
    epss
  • 17 SEP 08:15Z
    Authentication Vulnerability in NitroSense and PredatorSense Software
    cvelistv5