Acer vulnerabilities
58 CVEs and advisories name Acer as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-49192Summary Service Insecure Direct Object Reference
- CVE-2026-49191Exposed Hard-coded M3WebServer Backend API Key
- CVE-2026-49190Missing Per-Instruction Authorization Checks
- CVE-2026-49189Broadcast Receiver Privilege Escalation
- CVE-2026-49188Elevated Root Command Execution via ai_cmd Sockets
- CVE-2026-49187Hard-coded APK Resource Credentials & Scepters
- CVE-2026-49186Lack of MQTT Broker Topic Access Control Lists
- CVE-2026-49185Instruction Injection via FieldX MDM
- CVE-2026-49201Acer Wave 7 router: Hardcoded Cryptographic Key
- CVE-2026-49200Acer Wave 7 router: Broken Access Control
- CVE-2026-49199Predator Connect W6x: RCE via MQTT
- CVE-2026-49198Predator Connect W6x: MQTT Broker Access Control
- CVE-2026-49197Predator Connect W6x: Improper Authentication
- CVE-2026-49196Predator Connect W6x: Web Interface Command Injection
- CVE-2026-49195Predator Connect W6x: unauthenticated Debug Service
- CVE-2026-9789NitroSense V3: Security Vulnerability Information
- CVE-2026-9490Acer Care Center creates a Named Pipe with a weak Security Descriptor
- CVE-2026-9489NitroSense V3: Local Privilege Escalation (LPE) vulnerability
- CVE-2026-8069PredatorSense V3: Local Privilege Escalation (LPE) vulnerability
- CVE-2019-25302Acer Launch Manager 6.1.7600.16385 - 'DsiWMIService' Unquoted Service Path
- CVE-2020-36976Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path
- CVE-2021-47826Acer Backup Manager Module 3.0.0.99 - 'IScheduleSvc.exe' Unquoted Service Path
- CVE-2021-47825Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service Path
- CVE-2021-47823ePowerSvc 6.0.3008.0 - 'ePowerSvc.exe' Unquoted Service Path
- CVE-2025-14305Acer｜ListCheck.exe - Local Privilege Escalation
- CVE-2025-5491Acer ControlCenter - Remote Code Execution
- CVE-2024-8105Insecure Platform Key (PK) used in UEFI system firmware signature
- CVE-2022-4020Acer Aspire BIOS vulnerability