This vulnerability (CVE-2026-50608) in Acer System Monitoring arises from the WebSocket handshake process not properly enforcing authentication before permitting connections. This could allow unauthorized users to access certain service functionalities under specific conditions. The issue is classified under CWE-306 (Missing Authentication for Critical Function). The affected software versions are those up to and including 1.0.19.2. The CVSS 4.0 base score is 1.2, reflecting low attack vector and impact metrics. There is no vendor advisory or patch information available at this time, and no known exploits have been reported.

The impact is limited due to the low CVSS score of 1.2, indicating that exploitation requires local access with low complexity and results in low confidentiality, integrity, and availability impacts. Unauthorized users might gain limited access to service functionality via the WebSocket interface, but no further details on potential damage or exploitation are provided.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround is documented, users should monitor vendor communications for updates. Restricting local access to the affected service and limiting WebSocket connections to trusted users may reduce exposure until a fix is available.