CVE-2026-50603

MediumCVSS 4.9

Published: 17/09/2026(UTC)Updated: 18/09/2026(UTC)Translated: 17/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.07%

0th percentile - higher than 0% of all known CVEs

Summary

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to access protected information or perform unauthorized actions.

Risk Assessment

A local attacker may gain access to protected information or perform unauthorized actions on the device.

Recommendation

Update NitroSense and PredatorSense to a version that removes the hard-coded AES key.

Other vulnerabilities in Acer Agent Service

CVE-2026-50604Medium
A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The socket handshake process does not properly require authentication before granting access to the service. Under certain circumstances, an unauthorized connection may be established, potentially allowing access to functionality that should be restricted.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS