2
CVEs
0
Critical
1
High
0
KEV
0
PoC
1
Unpatched C/H
0.0%
Patch Rate
0.2%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
1
MEDIUM
1
LOW
0
Monthly CVE Trend
Affected Products (30)
Connect M6E 5G Portable Wifi Router
26
Predator Connect W6X
5
Cr 48 Chromebook
3
Series 5 Chromebook
3
Ac700 Chromebook
3
Chrome Os
3
Chrome
3
Wave 7 Router
2
Care Center
2
Nitrorsense V3
2
Veriton X6620G Firmware
1
Aspire 1602M Firmware
1
Predatorsense V3
1
Extensa Ex215 21G Firmware
1
Veriton E430 Firmware
1
Aspire Z3 615 Firmware
1
Series 5 550 Chromebook
1
Ap130 F2 Firmware
1
Aspire Xc600 Firmware
1
Veriton M2611G Firmware
1
Veriton N2620G Firmware
1
Veriton X4620G Firmware
1
Altos W2000H W570H F4 Firmware
1
Aspire Xc100 Firmware
1
Aspire A115 21 Firmware
1
Chromebox 3
1
Veriton M4620 Firmware
1
Aspire Tc 120 Firmware
1
Veriton M2611 Firmware
1
Veriton S6620G Firmware
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-50602 | Local privilege escalation in Acer's Planet9 software allows an authenticated local user to achieve arbitrary code execution with SYSTEM privileges by exploiting overly permissive file ACLs on the Planet9 background service executable. The service runs as SYSTEM but the executable it invokes grants write access to non-administrative users, enabling binary replacement. When the service restarts or the host reboots, the attacker-controlled payload executes with full SYSTEM authority. No public exploit has been identified at time of analysis, and this is not listed in the CISA KEV catalog. | HIGH | 8.5 | 0.1% | 43 |
No patch
|
| CVE-2026-50601 | The Acer Planet9 desktop application contains a hardcoded read-only API key that grants unauthenticated network access to Acer's internal repositories. Any user possessing the application binary can extract this credential via static analysis, access repository contents, and recover embedded administrative credentials from within those repositories - potentially enabling administrative control over repository infrastructure and software source code modification. No public exploit code exists at time of analysis (CVSS 4.0 E:U), and Acer has released an update to remediate the issue. | MEDIUM | 6.6 | 0.2% | 33 |
No patch
|