What is GHSA-x445-jgfc-928v?

GHSA-x445-jgfc-928v is a security advisory published by GitHub Security Advisories with Medium severity. An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket...

Which CVE IDs does GHSA-x445-jgfc-928v cover?

GHSA-x445-jgfc-928v covers the following CVE IDs: CVE-2026-50227. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-x445-jgfc-928vMedium

An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket...

Vendor

GitHub Security Advisories

Published

September 23, 2026

Last Modified

September 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-50227 →

📋 Description

An unauthenticated local attacker can connect to the MQTT broker over its localhost WebSocket endpoint in Acer NitroSense software (versions up to and including 5.2.62). This allows the attacker to invoke exposed ddsc RPC functions, including child_process.execSync(), resulting in arbitrary command execution in the application context.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-50227
https://community.acer.com/en/kb/articles/20052
https://github.com/advisories/GHSA-x445-jgfc-928v