CVE-2026-50228

— UNSCORED

Published 2026-09-23 · Updated 2026-09-25

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software (versions up to and including 5.2.63) on localhost TCP port 9993. Because Chromium remote debugging is enabled in the production application, the attacker can execute JavaScript in the privileged application context and achieve arbitrary code execution.

Weaknesses

CWE-489

All references

https://community.acer.com/en/kb/articles/20051

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-100295
LOWCVE-2026-73593
MEDIUMCVE-2026-81943
HIGHCVE-2026-84486

Related by shared AI tags and CWE weakness class. Browse the full archive.