EUVD-2026-81399
GHSA-x8fr-m9rf-5pvf
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local WebSocket service reachable by any local actor without credentials (AV:L, PR:N), with only low confidentiality/integrity/availability impact to the monitoring service.
Primary rating from Vendor (Acer).
CVSS VectorVendor: Acer
Lifecycle Timeline
1DescriptionCVE.org
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require authentication before allowing connections to the service. Under certain circumstances, unauthorized access to service functionality may be possible.
AnalysisAI
Local authentication bypass in the Acer System Monitoring component bundled with NitroSense (Nitro laptops) and PredatorSense (Predator laptops) lets any user who already holds a session or code execution on the machine open a WebSocket connection to the monitoring service without supplying credentials, because the handshake never performs an authentication check (CWE-306). Exploitation is constrained to the local attack vector (AV:L) and requires the component to be installed and running; it is not remotely reachable, the vendor's own description hedges with 'under certain circumstances', and the exploit is unproven (E:U). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires LOCAL access to a machine running Acer's System Monitoring component (shipped with NitroSense on Nitro laptops and PredatorSense on Predator laptops): the attacker needs an existing local session or local code execution to reach the WebSocket service. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a low-priority issue by every available signal. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch version is identified in the available data for CVE-2026-50608: the single reference (https://community.acer.com/en/kb/articles/19875) is an Acer community knowledge-base article and no fixed build number, GitHub PR, or commit is cited, so treat this as 'no vendor-released patch identified at time of analysis' and monitor that advisory plus Acer's NitroSense/PredatorSense update channels for a corrected build. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in System Monitoring
View allLocal privilege escalation in Acer System Monitoring, the privileged service bundled with NitroSense and PredatorSense o
Local privilege escalation in Acer System Monitoring, a component bundled with NitroSense and PredatorSense on Acer Nitr
Acer System Monitoring, the WebSocket-enabled helper bundled with NitroSense and PredatorSense on Acer Nitro and Predato
Local attackers can extract a hard-coded AES encryption key from the Acer System Monitoring component, which is bundled
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today