Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
NitroSense 3.x before 3.01.3052 contains Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing any authenticated local user to execute arbitrary code with NT AUTHORITY\SYSTEM privileges and to delete arbitrary files with SYSTEM privileges. By leveraging this, an attacker can execute arbitrary code on the target system with elevated privileges.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
There is a new vulnerability with elevated criticality in Acer NitrorSense (CVE-2026-9489) https://vuldb.com/vuln/365471
Post summary
A new high‑critical CVE‑2026‑9489 affecting Acer NitrorSense has been announced; the brief post provides no details on exploitation techniques or mitigation.
A lot of offensive activities were identified targeting Acer NitrorSense (CVE-2026-9489) https://vuldb.com/vuln/365471/cti
Post summary
The post reports widespread offensive activity targeting Acer NitrorSense CVE-2026-9489, but offers no technical or patch information.