PT-2026-94198 · Acer · Predatorsense+1

Ayush Choudhary

·

CVE-2026-50608

·

Published

2026-09-17

·

Updated

2026-09-18

CVSS v4.0

1.2

Low

VectorAV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions NitroSense (affected versions not specified) PredatorSense (affected versions not specified)
Description The Acer System Monitoring component, used in NitroSense and PredatorSense, contains a flaw where the WebSocket handshake process fails to properly require authentication before permitting connections to the service. This may allow unauthorized access to service functionality under certain conditions.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-50608

Affected Products

Nitrosense
Predatorsense