CVE-2026-50603

MediumCVSS 4.9/10Last modified Sep 18, 2026

Description

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to access protected information or perform unauthorized actions.

Metrics

CVSS 4.0 4.9/10

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-321

Affected software

Vendor	Product	Versions
Acer	Agent Service	<= 1.2.110.2

References

https://community.acer.com/en/kb/articles/19878

Timeline

Published: Sep 17, 2026
Last modified: Sep 18, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-506044.9A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The socket handshake pro CVE-2026-506057.4A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. Insufficient access cont CVE-2026-506061.2A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is CVE-2026-506072.7A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service CVE-2026-506081.2A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handsh CVE-2026-506097.4A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access CVE-2026-50614.7The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading CVE-2026-506107.4A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient a CVE-2026-506129.4An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they CVE-2026-506199.3A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the CVE-2026-50624.9The PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin plugin for WordPress is vulnerable to CVE-2026-506228.8Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authe