Acer has 11 CVEs on record. Disclosure cadence is accelerating: 10 in the last 90 days against 1 in the 90 before. The busiest recent month was September 2026 with 10. The median CVSS is 6.1 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-284 (4) and CWE-306 (3). Most affected products: System Monitoring (5), Agent Service (2), NitroSense V5 (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.1
- Publish → KEV
- —
- Last 90 days
- 10 prev 1
Products
- System Monitoring 5
- Agent Service 2
- NitroSense V5 2
- Agent Serivce 1
- nitrosense 1
Worst active — by depth score
CVE-2026-8069High· 7.8PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions55CVE-2026-50610High· 7.4A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service41CVE-2026-50609High· 7.4A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense41CVE-2026-50605High· 7.4A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense41CVE-2026-50228Medium· 6.1An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software (versions up to and including 5.2.63) on localhost TCP port 999334
Acer vulnerabilities
CVEs affecting Acer, newest first. Open any entry for full detail, references, and exploit status.
11 CVEsRSS
CVE-2026-50228Medium· 6.1An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software (versions up to and including 5.2.63) on localhost TCP port 9993
An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software (versions up to and including 5.2.63) on localhost TCP port 9993. Because Chromium remote debugging is enabled in the pro…
CVE-2026-50227Medium· 6.1An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoint in Acer NitroSense software (versions up to and including 5.2.62)
An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoint in Acer NitroSense software (versions up to and including 5.2.62). This allows the attacker to invoke exposed ddsc RPC functions, incl…
CVE-2026-50609High· 7.4A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform …
CVE-2026-50610High· 7.4A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service. An authenticated local user may be able to access the ser…
CVE-2026-50608Low· 1.2A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require authentication before allowing connections to the service. …
CVE-2026-50605High· 7.4A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense
A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. Insufficient access controls within a privileged service may allow an authenticated local user to perform unauthorized re…
CVE-2026-50606Low· 1.2A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumst…
CVE-2026-50607Low· 2.7A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all network interfaces, which may expose the service to unintended ne…
CVE-2026-50604Medium· 4.9A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense
A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The socket handshake process does not properly require authentication before granting access to the service. Under certai…
CVE-2026-50603Medium· 4.9A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense
A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstance…
CVE-2026-8069High· 7.8PoCPredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions
PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigu…