CVE-2026-50609CWE-284broken-access-control

CVE-2026-50609

published September 17, 2026

CVSS
7.4
EPSS
0%
Percentile
2.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, this could lead to privilege escalation or compromise of the affected system.

The record
Technical detail
CVSS
7.4 · NONE
CVSS v4.0
7.4 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
EPSS
0.00130 · 2.4th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-09-17T13:16Z
References (1)
EPSS history
Timeline
  • 18 SEP 04:00Z
    EPSS moved — → 0%
    epss
  • 17 SEP 08:21Z
    Unauthorized Registry Modification Vulnerability in NitroSense and PredatorSense Software
    cvelistv5