# Acer NitroSense vulnerabilities

Source: https://junglewise.ai/threats/technologies/nitrosense  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/nitrosense.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 13 vulnerabilities in Acer NitroSense: 0 in the last 7 days and 10 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-50228, was published on 23 September 2026. Nothing in the last four weeks, down from 10 vulnerabilities in the four before.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 10
- All time: 13 (0 critical, 0 exploited in the wild)

## About Acer NitroSense

A utility application for Acer laptops that allows users to monitor system performance and control fan speeds.

## Latest Acer NitroSense vulnerabilities

- [CVE-2026-50228: Acer NitroSense arbitrary code execution via exposed DevTools](https://junglewise.ai/threats/cve-2026-50228-an-unauthenticated-local-attacker-can-connect-to-the-electron) (info, published 23 Sep 2026)
- [CVE-2026-50227: Acer NitroSense MQTT broker authentication bypass](https://junglewise.ai/threats/cve-2026-50227-an-unauthenticated-local-attacker-can-connect-to-the-mqtt-broker) (info, published 23 Sep 2026)
- [CVE-2026-50610: Acer NitroSense privilege escalation via System Monitoring](https://junglewise.ai/threats/cve-2026-50610-acer-nitrosense-privilege-escalation-via-system-monitoring) (info, published 17 Sep 2026)
- [CVE-2026-50609: Acer System Monitoring insufficient access control in Named Pipe service](https://junglewise.ai/threats/cve-2026-50609-acer-system-monitoring-insufficient-access-control-in-named-pipe) (info, published 17 Sep 2026)
- [CVE-2026-50608: Acer NitroSense authentication bypass in WebSocket handshake](https://junglewise.ai/threats/cve-2026-50608-acer-nitrosense-authentication-bypass-in-websocket-handshake) (info, published 17 Sep 2026)
- [CVE-2026-50607: Acer NitroSense WebSocket service exposure on all network interfaces](https://junglewise.ai/threats/cve-2026-50607-acer-nitrosense-websocket-service-exposure-on-all-network) (info, published 17 Sep 2026)
- [CVE-2026-50606: Acer NitroSense and PredatorSense hard-coded encryption key](https://junglewise.ai/threats/cve-2026-50606-acer-nitrosense-and-predatorsense-hard-coded-encryption-key) (info, published 17 Sep 2026)
- [CVE-2026-50605: Acer Agent Service insufficient access control in registry operations](https://junglewise.ai/threats/cve-2026-50605-acer-agent-service-insufficient-access-control-in-registry) (info, published 17 Sep 2026)
- [CVE-2026-50604: Acer Agent Service authentication bypass in socket handshake](https://junglewise.ai/threats/cve-2026-50604-acer-agent-service-authentication-bypass-in-socket-handshake) (info, published 17 Sep 2026)
- [CVE-2026-50603: Acer NitroSense and PredatorSense hardcoded encryption key](https://junglewise.ai/threats/cve-2026-50603-acer-nitrosense-and-predatorsense-hardcoded-encryption-key) (info, published 17 Sep 2026)
- [CVE-2026-9789: Acer NitroSense privilege escalation in PSAdminAgent service](https://junglewise.ai/threats/cve-2026-9789-acer-nitrosense-privilege-escalation-in-psadminagent-service) (info, CVSS 8.5, published 28 May 2026)
- [CVE-2026-9489: Acer NitroSense privilege escalation via Windows Named Pipe](https://junglewise.ai/threats/cve-2026-9489-acer-nitrosense-privilege-escalation-via-windows-named-pipe) (info, CVSS 8.5, published 25 May 2026)
- [CVE-2026-8069: Acer PredatorSense privilege escalation in Windows Named Pipe](https://junglewise.ai/threats/cve-2026-8069-acer-predatorsense-privilege-escalation-in-windows-named-pipe) (high, CVSS 7.8, published 8 May 2026)

## Most severe Acer NitroSense vulnerabilities

- [CVE-2026-8069: Acer PredatorSense privilege escalation in Windows Named Pipe](https://junglewise.ai/threats/cve-2026-8069-acer-predatorsense-privilege-escalation-in-windows-named-pipe) (high, CVSS 7.8, published 8 May 2026)
- [CVE-2026-9489: Acer NitroSense privilege escalation via Windows Named Pipe](https://junglewise.ai/threats/cve-2026-9489-acer-nitrosense-privilege-escalation-via-windows-named-pipe) (info, CVSS 8.5, published 25 May 2026)
- [CVE-2026-9789: Acer NitroSense privilege escalation in PSAdminAgent service](https://junglewise.ai/threats/cve-2026-9789-acer-nitrosense-privilege-escalation-in-psadminagent-service) (info, CVSS 8.5, published 28 May 2026)
- [CVE-2026-50607: Acer NitroSense WebSocket service exposure on all network interfaces](https://junglewise.ai/threats/cve-2026-50607-acer-nitrosense-websocket-service-exposure-on-all-network) (info, published 17 Sep 2026)
- [CVE-2026-50227: Acer NitroSense MQTT broker authentication bypass](https://junglewise.ai/threats/cve-2026-50227-an-unauthenticated-local-attacker-can-connect-to-the-mqtt-broker) (info, published 23 Sep 2026)
- [CVE-2026-50608: Acer NitroSense authentication bypass in WebSocket handshake](https://junglewise.ai/threats/cve-2026-50608-acer-nitrosense-authentication-bypass-in-websocket-handshake) (info, published 17 Sep 2026)
- [CVE-2026-50604: Acer Agent Service authentication bypass in socket handshake](https://junglewise.ai/threats/cve-2026-50604-acer-agent-service-authentication-bypass-in-socket-handshake) (info, published 17 Sep 2026)
- [CVE-2026-50228: Acer NitroSense arbitrary code execution via exposed DevTools](https://junglewise.ai/threats/cve-2026-50228-an-unauthenticated-local-attacker-can-connect-to-the-electron) (info, published 23 Sep 2026)
- [CVE-2026-50610: Acer NitroSense privilege escalation via System Monitoring](https://junglewise.ai/threats/cve-2026-50610-acer-nitrosense-privilege-escalation-via-system-monitoring) (info, published 17 Sep 2026)
- [CVE-2026-50609: Acer System Monitoring insufficient access control in Named Pipe service](https://junglewise.ai/threats/cve-2026-50609-acer-system-monitoring-insufficient-access-control-in-named-pipe) (info, published 17 Sep 2026)

## Vulnerabilities per week

Nothing in the last four weeks, down from 10 vulnerabilities in the four before.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 8 | 0 | 0 |
| 21 Sep 2026 | 2 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Acer technologies

- [Acer Connect M6E 5G Portable WiFi Router](https://junglewise.ai/threats/technologies/connect-m6e-5g-portable-wifi-router): 26 vulnerabilities
- [Acer Predatorsense](https://junglewise.ai/threats/technologies/predatorsense): 9 vulnerabilities
- [Acer Connect W6x Router](https://junglewise.ai/threats/technologies/connect-w6x-router): 5 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Acer NitroSense vulnerabilities", https://junglewise.ai/threats/technologies/nitrosense, 9 November 2026.
