CVE-2026-50609

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, this could lead to privilege escalation or compromise of the affected system.

• CWE-284

• https://community.acer.com/en/kb/articles/19876

Published

Sep 17, 2026

Last Modified

Sep 18, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-50603A vulnerability has been identified in the Acer Agent Servic…4.9
• CVE-2026-50604A vulnerability has been identified in the Acer Agent Servic…4.9
• CVE-2026-50605A vulnerability has been identified in the Acer Agent Servic…7.4
• CVE-2026-50606A vulnerability has been identified in the Acer System Monit…1.2
• CVE-2026-50607A vulnerability has been identified in the Acer System Monit…2.7
• CVE-2026-50608A vulnerability has been identified in the Acer System Monit…1.2
• CVE-2026-5061The consul-template library before version 0.42.0 is vulnera…4.7
• CVE-2026-50610A vulnerability has been identified in the Acer System Monit…7.4
• CVE-2026-5062The PrettyLinks – Affiliate Links, Link Branding, Link Track…4.9
• CVE-2026-50622Description: Missing Authorization in Apache Atlas. A missin…8.8
• CVE-2026-50623An authentication bypass vulnerability exists in the OAuth2 …4.8
• CVE-2026-50627The JwtAccessTokenValidator class in Apache CXF fails to val…9.1