CVE-2026-50228

Vulnerability Description

An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software (versions up to and including 5.2.63) on localhost TCP port 9993. Because Chromium remote debugging is enabled in the production application, the attacker can execute JavaScript in the privileged application context and achieve arbitrary code execution.

Related Weaknesses (CWE)

CWE-489

References

https://community.acer.com/en/kb/articles/20051

FAQ

What is CVE-2026-50228?

CVE-2026-50228 is a documented vulnerability. An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software (versions up to and including 5.2.63) on localhost TCP port 9993. Because Chromium r...

How severe is CVE-2026-50228?

CVSS scoring is not yet available for CVE-2026-50228. Check NVD for updates.

Is there a patch for CVE-2026-50228?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.