Vulnerability · Published Sep 17, 2026 · Assigned by Acer
CVE-2026-50603Hard-coded encryption key vulnerability in Acer Agent Service for NitroSense and PredatorSense
Medium 4.9
In plain English
A medium-severity security flaw in Agent Service from Acer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).
Official description
A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key to access protected information or perform unauthorized actions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Acer | Agent Service | * – through 1.2.110.2 |
Weakness: CWE-321 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:U