CVE-2026-9490

🗓️ 25 May 2026 07:25:02Reported by AcerType

cve🔗 web.nvd.nist.gov👁 25 Views🌐 WEB

Acer Care Center creates a weak Named Pipe allowing local authenticated users to crash ACCSvc via message 0x03; update to latest version.

Reporter	Title	Published	Views	Family All 10
GithubExploit	Exploit for CVE-2026-9490	30 May 202608:38	–	githubexploit
ATTACKERKB	CVE-2026-9490	25 May 202607:25	–	attackerkb
Circl	CVE-2026-9490	30 May 202611:00	–	circl
CNNVD	Acer Care Center 安全漏洞	25 May 202600:00	–	cnnvd
Cvelist	CVE-2026-9490 Acer Care Center creates a Named Pipe with a weak Security Descriptor	25 May 202607:25	–	cvelist
EUVD	EUVD-2026-31648	25 May 202607:25	–	euvd
NVD	CVE-2026-9490	25 May 202608:16	–	nvd
Positive Technologies	PT-2026-43021	25 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-9490	26 May 202620:14	–	redhatcve
Vulnrichment	CVE-2026-9490 Acer Care Center creates a Named Pipe with a weak Security Descriptor	25 May 202607:25	–	vulnrichment

NVD

Node

acer care_centerRange<4.00.3060

[
  {
    "vendor": "Acer",
    "product": "Care Center",
    "platforms": [
      "Windows"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "4.0",
        "lessThanOrEqual": "4.00.3058",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
community	www.community.acer.com/en/kb/articles/19668

Parameter	Position	Path	Description	CWE
message type 0x03	path	\\.\pipe\treadstone_service_LightMode	Weak Named Pipe ACL allows authenticated users to connect and send crafted message to crash ACCSvc (DoS) and potentially enable privilege actions.	CWE-269
pipe IPC messaging	path	\\.\pipe\treadstone_service_LightMode	Weak Named Pipe ACL allows authenticated users to connect and send crafted message to crash ACCSvc (DoS) and potentially enable privilege actions.	CWE-269

17 Jun 2026 11:05Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.5

CVSS 46.8

EPSS0.00109

SSVC

CWE-269