CVE-2026-8069

Katalog CVE

CVSS 7.8 · High EPSS 0,17%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada acer nitrosense, acer predatorsense. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing any authenticated local user to execute arbitrary code with NT AUTHORITY\SYSTEM privileges and to delete arbitrary files with SYSTEM privileges. By leveraging this, an attacker can execute arbitrary code on the target system with elevated privileges.

Rincian

Terbit di NVD

8 Mei 2026

Terakhir diubah

12 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-269: Improper Privilege Management
CWE-284: Improper Access Control
CWE-732: Incorrect Permission Assignment for Critical Resource

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 5,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://community.acer.com/en/kb/articles/19652 advisory vendor