# cve.now: Acer

The newest entries naming Acer as an affected vendor (up to 200), of 58 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-50228](https://cve.now/CVE-2026-50228.md): Electron DevTools Arbitrary Code Execution Vulnerability in NitroSense (CVSS 6.1)
- [CVE-2026-50227](https://cve.now/CVE-2026-50227.md): MQTT WebSocket Command Execution Vulnerability in NitroSense (CVSS 6.1)
- [CVE-2026-50610](https://cve.now/CVE-2026-50610.md): Improper Access control Vulnerability in NitroSense and PredatorSense Software (CVSS 7.4)
- [CVE-2026-50609](https://cve.now/CVE-2026-50609.md): Unauthorized Registry Modification Vulnerability in NitroSense and PredatorSense Software (CVSS 7.4)
- [CVE-2026-50608](https://cve.now/CVE-2026-50608.md): Authentication Vulnerability in NitroSense and PredatorSense Software (CVSS 1.2)
- [CVE-2026-50607](https://cve.now/CVE-2026-50607.md): WebSocket Exposure Vulnerability in NitroSense and PredatorSense Software (CVSS 2.7)
- [CVE-2026-50606](https://cve.now/CVE-2026-50606.md): Hard-coded Encryption Key Vulnerability in Acer System Monitoring for NitroSense and PredatorSense Software (CVSS 1.2)
- [CVE-2026-50605](https://cve.now/CVE-2026-50605.md): Privilege Escalation Vulnerability in NitroSense and PredatorSense Software (CVSS 7.4)
- [CVE-2026-50604](https://cve.now/CVE-2026-50604.md): Unauthenticated Access Vulnerability in NitroSense and PredatorSense Software (CVSS 4.9)
- [CVE-2026-50603](https://cve.now/CVE-2026-50603.md): Hard-coded encryption key vulnerability in Acer Agent Service for NitroSense and PredatorSense (CVSS 4.9)
- [CVE-2026-50602](https://cve.now/CVE-2026-50602.md): Planet9 Incorrect Permission Assignment Vulnerability Information (CVSS 8.5)
- [CVE-2026-50601](https://cve.now/CVE-2026-50601.md): Planet9 Hardcoded Credentials Vulnerability Information (CVSS 6.6)
- [CVE-2026-50226](https://cve.now/CVE-2026-50226.md): Firmware Theft & IMEI Spoofing via Connect-OTA (CVSS 6.9)
- [CVE-2026-50225](https://cve.now/CVE-2026-50225.md): Account Creation Exhaustion (CVSS 8.8)
- [CVE-2026-50224](https://cve.now/CVE-2026-50224.md): Unauthenticated IPv6 WAN Management Exposure (CVSS 6.9)
- [CVE-2026-50214](https://cve.now/CVE-2026-50214.md): Shared Secret Quota Inflation (CVSS 9.3)
- [CVE-2026-50213](https://cve.now/CVE-2026-50213.md): Bulk User Private Data Harvesting (CVSS 8.7)
- [CVE-2026-50212](https://cve.now/CVE-2026-50212.md): Arbitrary Remote Device Unbinding (CVSS 7.1)
- [CVE-2026-50211](https://cve.now/CVE-2026-50211.md): Exposed Factory Testing App Boundaries (CVSS 8.8)
- [CVE-2026-50210](https://cve.now/CVE-2026-50210.md): Weak Static Cryptographic Initialization Vectors (CVSS 6.9)
- [CVE-2026-50209](https://cve.now/CVE-2026-50209.md): MDM Server Registration Overriding (CVSS 9.3)
- [CVE-2026-50208](https://cve.now/CVE-2026-50208.md): Permissive TrustAllCerts TLS Verification (CVSS 9.2)
- [CVE-2026-50207](https://cve.now/CVE-2026-50207.md): Local Modem Manipulation via Binder Interfaces (CVSS 8.5)
- [CVE-2026-50206](https://cve.now/CVE-2026-50206.md): VPN Command Injection Vulnerability (CVSS 8.5)
- [CVE-2026-50205](https://cve.now/CVE-2026-50205.md): Plaintext Log Credential Leakage (CVSS 8.8)
- [CVE-2026-49204](https://cve.now/CVE-2026-49204.md): Hard-coded AWS Cognito Testing Accounts (CVSS 6.9)
- [CVE-2026-49202](https://cve.now/CVE-2026-49202.md): Unverified Meeting Recording Endpoints & Permissive CORS (CVSS 8.8)
- [CVE-2026-49203](https://cve.now/CVE-2026-49203.md): Unauthenticated eSIM Configuration Manipulation (CVSS 7.2)
- [CVE-2026-49194](https://cve.now/CVE-2026-49194.md): SCREEN\_CLICK Authentication Bypass (CVSS 9.4)
- [CVE-2026-49193](https://cve.now/CVE-2026-49193.md): Publicly Readable AWS S3 Telemetry Buckets (CVSS 8.7)
- [CVE-2026-49192](https://cve.now/CVE-2026-49192.md): Summary Service Insecure Direct Object Reference (CVSS 5.3)
- [CVE-2026-49191](https://cve.now/CVE-2026-49191.md): Exposed Hard-coded M3WebServer Backend API Key (CVSS 9.3)
- [CVE-2026-49190](https://cve.now/CVE-2026-49190.md): Missing Per-Instruction Authorization Checks (CVSS 9.4)
- [CVE-2026-49189](https://cve.now/CVE-2026-49189.md): Broadcast Receiver Privilege Escalation (CVSS 8.5)
- [CVE-2026-49188](https://cve.now/CVE-2026-49188.md): Elevated Root Command Execution via ai\_cmd Sockets (CVSS 8.7)
- [CVE-2026-49187](https://cve.now/CVE-2026-49187.md): Hard-coded APK Resource Credentials & Scepters (CVSS 8.7)
- [CVE-2026-49186](https://cve.now/CVE-2026-49186.md): Lack of MQTT Broker Topic Access Control Lists (CVSS 8.6)
- [CVE-2026-49185](https://cve.now/CVE-2026-49185.md): Instruction Injection via FieldX MDM (CVSS 10.0)
- [CVE-2026-49201](https://cve.now/CVE-2026-49201.md): Acer Wave 7 router: Hardcoded Cryptographic Key (CVSS 10.0)
- [CVE-2026-49200](https://cve.now/CVE-2026-49200.md): Acer Wave 7 router: Broken Access Control (CVSS 10.0)
- [CVE-2026-49199](https://cve.now/CVE-2026-49199.md): Predator Connect W6x: RCE via MQTT (CVSS 10.0)
- [CVE-2026-49198](https://cve.now/CVE-2026-49198.md): Predator Connect W6x: MQTT Broker Access Control (CVSS 8.3)
- [CVE-2026-49197](https://cve.now/CVE-2026-49197.md): Predator Connect W6x: Improper Authentication (CVSS 10.0)
- [CVE-2026-49196](https://cve.now/CVE-2026-49196.md): Predator Connect W6x: Web Interface Command Injection (CVSS 8.6)
- [CVE-2026-49195](https://cve.now/CVE-2026-49195.md): Predator Connect W6x: unauthenticated Debug Service (CVSS 8.7)
- [CVE-2026-9789](https://cve.now/CVE-2026-9789.md): NitroSense V3: Security Vulnerability Information (CVSS 8.5)
- [CVE-2026-9490](https://cve.now/CVE-2026-9490.md): Acer Care Center creates a Named Pipe with a weak Security Descriptor (CVSS 6.8)
- [CVE-2026-9489](https://cve.now/CVE-2026-9489.md): NitroSense V3: Local Privilege Escalation (LPE) vulnerability (CVSS 8.5)
- [CVE-2026-8069](https://cve.now/CVE-2026-8069.md): PredatorSense V3: Local Privilege Escalation (LPE) vulnerability (CVSS 8.5)
- [CVE-2019-25302](https://cve.now/CVE-2019-25302.md): Acer Launch Manager 6.1.7600.16385 - 'DsiWMIService' Unquoted Service Path (CVSS 8.5)
- [CVE-2020-36976](https://cve.now/CVE-2020-36976.md): Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path (CVSS 8.5)
- [CVE-2021-47826](https://cve.now/CVE-2021-47826.md): Acer Backup Manager Module 3.0.0.99 - 'IScheduleSvc.exe' Unquoted Service Path (CVSS 8.5)
- [CVE-2021-47825](https://cve.now/CVE-2021-47825.md): Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service Path (CVSS 8.5)
- [CVE-2021-47823](https://cve.now/CVE-2021-47823.md): ePowerSvc 6.0.3008.0 - 'ePowerSvc.exe' Unquoted Service Path (CVSS 8.5)
- [CVE-2025-14305](https://cve.now/CVE-2025-14305.md): Acer｜ListCheck.exe - Local Privilege Escalation (CVSS 8.5)
- [CVE-2025-5491](https://cve.now/CVE-2025-5491.md): Acer ControlCenter - Remote Code Execution (CVSS 8.8)
- [CVE-2024-8105](https://cve.now/CVE-2024-8105.md): Insecure Platform Key (PK) used in UEFI system firmware signature (CVSS 6.4)
- [CVE-2022-4020](https://cve.now/CVE-2022-4020.md): Acer Aspire BIOS vulnerability (CVSS 8.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/acer
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.