CVE-2026-50603: Acer Agent Service

Medium severity, CVSS 4.9. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to access protected information or perform unauthorized actions.

Affected products

• Acer Agent Service: up to and including 1.2.110.2

Published 2026-09-17. Last modified 2026-09-18.