PT-2026-38677 · Acer · Predatorsense

Artem Domarev · Published 2026-05-08 · Updated 2026-05-09 · CVE-2026-8069

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions PredatorSense versions 3.00.3136 through 3.00.3196

Description A misconfigured Windows Named Pipe uses a custom protocol to invoke internal functions. This allows any authenticated local user to execute arbitrary code and delete arbitrary files with NT AUTHORITYSYSTEM privileges, leading to local privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Access Control

Incorrect Permission

Improper Privilege Management

Path traversal

Weakness Enumeration

CWE-284

CWE-732

CWE-269

CWE-22

Related Identifiers

CVE-2026-8069

Affected Products

Predatorsense

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-8069 · Security Note
• https://twitter.com/CVEnew/status/2053174696816857388 · Twitter Post
• https://community.acer.com/en/kb/articles/19652 · Note
• https://twitter.com/VulmonFeeds/status/2052668471410876538 · Twitter Post
• https://t.me/CVEtracker/53100 · Telegram Post