Low severity · published Sep 17, 2026
CVE-2026-50606
Hard-coded Encryption Key Vulnerability in Acer System Monitoring for NitroSense and PredatorSense Software
1.2
CVSS
0.1%
EPSS
No
On KEV
Description
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to access protected information or perform unauthorized actions.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SM
System Monitoring · Acer
through 1.0.19.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-50606
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-50606
community.acer.com
https://community.acer.com/en/kb/articles/19873
More from System Monitoring
7.4
CVE-2026-50610
Improper Access control Vulnerability in NitroSense and PredatorSense Software
7.4
CVE-2026-50609
Unauthorized Registry Modification Vulnerability in NitroSense and PredatorSense Software
2.7
CVE-2026-50607
WebSocket Exposure Vulnerability in NitroSense and PredatorSense Software
1.2
CVE-2026-50608
Authentication Vulnerability in NitroSense and PredatorSense Software