CVE-2026-50608
LowCVSS 1.2Summary
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require authentication before allowing connections to the service. Under certain circumstances, unauthorized access to service functionality may be possible.
Risk Assessment
An unauthorized attacker can access Acer system monitoring service functionality, potentially leading to confidentiality or integrity compromise. This may enable further attacks on the system.
Recommendation
Update NitroSense and PredatorSense software to a version that fixes the WebSocket authentication issue. Until then, restrict network access to the monitoring service.
Other vulnerabilities in Acer System Monitoring
See all- CVE-2026-50607Low
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all network interfaces, which may expose the service to unintended network access.
- CVE-2026-50606Low
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to access protected information or perform unauthorized actions.
Original NVD description (English source)
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require authentication before allowing connections to the service. Under certain circumstances, unauthorized access to service functionality may be possible.