High severity · published May 8, 2026
CVE-2026-8069
PredatorSense V3: Local Privilege Escalation (LPE) vulnerability
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing any authenticated local user to execute arbitrary code with NT AUTHORITY\SYSTEM privileges and to delete arbitrary files with SYSTEM privileges. By leveraging this, an attacker can execute arbitrary code on the target system with elevated privileges.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PV
PredatorSense V3 · Acer
3.00.3136 through 3.00.3196 · source: vendor
NI
Nitrosense · Acer
3.00.0000 before 3.01.3056 · source: NVD
PR
Predatorsense · Acer
3.00.0000 before 3.00.3198 · source: NVD
