Is CVE-2026-9789 actively exploited?

No active exploitation of CVE-2026-9789 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-9789 be exploited remotely?

No. CVE-2026-9789 requires local access to exploit.

What is the CVSS score of CVE-2026-9789?

CVE-2026-9789 has a CVSS score of 8.5 (HIGH).

HOME VULNERABILITIESCVE-2026-9789

HIGH

CVE-2026-9789

CWE-22Published: May 28, 2026· Updated: May 28, 2026

8.5

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:5.9th

Official Description

A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions prior to 3.01.3052. The vulnerability stems from the the PSAdminAgent service, which creates a Named Pipe with a weak Access Control List (ACL). This allows any authenticated local user to connect and send commands. Because the service does not check the caller's privileges before running file deletion commands, a low-privileged local user can exploit this to delete arbitrary files with system authority.

NVD Source

Technical Analysis

CVE-2026-9789 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X