CVE-2026-50607
LowCVSS 2.7Summary
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all network interfaces, which may expose the service to unintended network access.
Risk Assessment
A WebSocket service listening on all network interfaces may be accessible to unauthorized users on the network, leading to unauthorized access. This can compromise the confidentiality and integrity of the system.
Recommendation
Update NitroSense and PredatorSense software to a version that restricts the WebSocket service to listen on the local interface only. Configure a firewall to block access to the service port from untrusted networks.
Other vulnerabilities in Acer System Monitoring
See all- CVE-2026-50608Low
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require authentication before allowing connections to the service. Under certain circumstances, unauthorized access to service functionality may be possible.
- CVE-2026-50606Low
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to access protected information or perform unauthorized actions.
Original NVD description (English source)
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all network interfaces, which may expose the service to unintended network access.