https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T03:37:41.336063+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-50227 CVE-2026-50227 — MQTT WebSocket Command Execution Vulnerability in NitroSense 2026-10-01T03:37:41.353222+00:00

Affected: Acer NitroSense V5

An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoint in Acer NitroSense software (versions up to and including 5.2.62). This allows the attacker to invoke exposed ddsc RPC functions, including child_process.execSync(), resulting in arbitrary command execution in the application context.