{"id":"CVE-2026-50604","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-50604","generatedAt":"2026-10-28T04:11:11.031Z","title":"A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense.","description":"A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The socket handshake process does not properly require authentication before granting access to the service. Under certain circumstances, an unauthorized connection may be established, potentially allowing access to functionality that should be restricted.","published":"2026-09-17T05:17:02.000Z","lastModified":"2026-09-18T16:25:08.000Z","status":"Deferred","sourceIdentifier":"8fc372e3-d9c5-46e4-9410-38469745c639","cvss":{"version":"4.0","score":4.9,"severity":"MEDIUM","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-306"],"affected":[],"epss":{"score":0.00206,"percentile":0.105,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.21%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://community.acer.com/en/kb/articles/19871","source":"8fc372e3-d9c5-46e4-9410-38469745c639"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-50604","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}