CVE-2026-8069
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
42/100
Published: 2026-05-08
Modified: 2026-10-26
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
X
AT:
None
VC:
High
VI:
High
VA:
High
Description
PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing any authenticated local user to execute arbitrary code with NT AUTHORITY\SYSTEM privileges and to delete arbitrary files with SYSTEM privileges. By leveraging this, an attacker can execute arbitrary code on the target system with elevated privileges.
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| acer | nitrosense | 3.00.0000 – 3.01.3056 |
| acer | predatorsense | 3.00.0000 – 3.00.3198 |
References & Advisories (1)
Vendor Advisory