References https://nvd.nist.gov/vuln/detail/CVE-2025-5491 https://community.acer.com/en/kb/articles/18243-misconfigured-windows-named-pipe-permissions-in-accsvc-exe-allows-for-remote-code-execution https://github.com/advisories/GHSA-72mp-7jph-388p https://sensepost.com/blog/2025/pwning-asus-driverhub-msi-center-acer-control-centre-and-razer-synapse-4/ https://gbhackers.com/acer-control-center-flaw/ https://cyberpress.org/acer-control-center-vulnerability/ https://www.twcert.org.tw/tw/cp-132-10180-36818-1.html https://www.varutra.com/ctp/threatpost/postDetails/Acer-ControlCenter-Security-Flaw-Exposes-Windows-to-Remote-Code-Execution/M1M2ODJoK3ZmWEtkcFNhWUZsVHhGUT09
Related VulnerabilitiesPoCCVE-2026-26216: Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks ParameterPoCCVE-2026-40281: Gotenberg <= 8.30.1 - Remote Code ExecutionPoCCVE-2026-86242: Bifrost < 1.6.3 - Unauthenticated Remote Plugin URL FetchPoCCRMEB /api/remote_register 权限绕过漏洞Apache Kafka UI /smartfilters/testexecutions 代码执行漏洞(CVE-2026-78166)PoCCVE-2025-62593: Ray < 2.52.0 - Remote Code ExecutionPoCCVE-2026-1340: Ivanti EPMM < 12.8.0.0 - Remote Code ExecutionPoCCVE-2026-86218: N-able N-central <2026.3.1.14 - Pre-Authentication Remote Code ExecutionPoCCVE-2026-0768: Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_codePoCCVE-2026-2113: tpadmin <= 1.3.12 - Remote Code ExecutionPoCCVE-2026-34234: CtrlPanel <= 1.1.1 - Remote Code ExecutionPoCCVE-2026-41679: Paperclip - Remote Code ExecutionPoCCVE-2026-5562: Provectus kafka-ui <=0.7.2 - Remote Code Execution