https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T10:27:29.010929+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-50227 fkie_cve-2026-50227 2026-09-28T10:27:29.044488+00:00

An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoint in Acer NitroSense software (versions up to and including 5.2.62). This allows the attacker to invoke exposed ddsc RPC functions, including child_process.execSync(), resulting in arbitrary command execution in the application context.

 https://vulnerability.circl.lu/vuln/ghsa-x445-jgfc-928v GHSA-x445-jgfc-928v 2026-09-28T10:27:29.044660+00:00

An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoint in Acer NitroSense software (versions up to and including 5.2.62). This allows the attacker to invoke exposed ddsc RPC functions, including child_process.execSync(), resulting in arbitrary command execution in the application context.