CVE-2026-50604
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The socket handshake process does not properly require authentication before granting access to the service. Under certain circumstances, an unauthorized connection may be established, potentially allowing access to functionality that should be restricted.
Risk Assessment
An unauthorized attacker could gain access to restricted service functionality, potentially leading to unauthorized actions.
Recommendation
Update NitroSense and PredatorSense software to the latest version containing the fix or contact the vendor for details.
Other vulnerabilities in Acer Agent Service
Original NVD description (English source)
A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The socket handshake process does not properly require authentication before granting access to the service. Under certain circumstances, an unauthorized connection may be established, potentially allowing access to functionality that should be restricted.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS