CVE-2026-50227

6.1 mediumEPSS 0.3%

Medium (6.1). EPSS 0.3% chance of exploitation in the next 30 days.

An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoint in Acer NitroSense software (versions up to and including 5.2.62). This allows the attacker to invoke exposed ddsc RPC functions, including child_process.execSync(), resulting in arbitrary command execution in the application context.

Severity

CVSS 4.0

6.1 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWEs: CWE-78, CWE-306
Published: 2026-09-23
Modified: 2026-09-25
Record from: the NVD, synced 2026-10-19

References

https://community.acer.com/en/kb/articles/20052

Check your stack JSON