CVE-2026-50607: WebSocket Exposure Vulnerability in NitroSense and PredatorSense Software
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all network interfaces, which may expose the service to unintended network access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict the NitroSense/PredatorSense WebSocket service from listening on all network interfaces; configure it to bind only to the intended/required interface(s) to prevent unintended network exposure.
Event History
Frequently Asked Questions
Which systems may be exposed?
Systems running the Acer System Monitoring component included with NitroSense or PredatorSense may be exposed if the WebSocket service is listening on network-accessible interfaces.
What access would an attacker need?
An attacker would need network access to the WebSocket service. Because it listens on all network interfaces, unintended network clients may be able to reach it.