CVE-2026-50606
LowCVSS 1.2Summary
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to access protected information or perform unauthorized actions.
Risk Assessment
A local attacker can use the embedded AES key to access protected information or perform unauthorized actions. This can lead to compromise of data confidentiality and integrity.
Recommendation
Update NitroSense and PredatorSense software to a version that does not use a hard-coded AES key. Until then, restrict local access to trusted users.
Other vulnerabilities in Acer System Monitoring
See all- CVE-2026-50608Low
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require authentication before allowing connections to the service. Under certain circumstances, unauthorized access to service functionality may be possible.
- CVE-2026-50607Low
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all network interfaces, which may expose the service to unintended network access.
Original NVD description (English source)
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to access protected information or perform unauthorized actions.