Skip to content
OpenAdvisories

Product · Acer

NitroSense V5

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-50228

    Electron DevTools Arbitrary Code Execution Vulnerability in NitroSense

    An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software (versions up to and including 5.2.63) on localhost TCP port 9993. Because Chromium remote debugging is enabled in the production application, t…

    Acer NitroSense V5
  • Medium 6.1
    CVE-2026-50227

    MQTT WebSocket Command Execution Vulnerability in NitroSense

    An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoint in Acer NitroSense software (versions up to and including 5.2.62). This allows the attacker to invoke exposed ddsc RPC functions, including child_process.ex…

    Acer NitroSense V5