CVE-2026-8069 HIGH

CVE-2026-8069: PredatorSense V3: Local Privilege Escalation (LPE) vulnerability

Vendor Acer
Product PredatorSense V3
Weakness CWE-22 · Path traversal
Published May 8, 2026
Last update May 8, 2026

CVSS base score

8.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing any authenticated local user to execute arbitrary code with NT AUTHORITY\SYSTEM privileges and to delete arbitrary files with SYSTEM privileges. By leveraging this, an attacker can execute arbitrary code on the target system with elevated privileges.

Key dates

02Disclosure timeline

May 8, 2026 CVE published
May 8, 2026 Record updated