Acer ControlCenter - Remote Code Execution

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-5491
• https://community.acer.com/en/kb/articles/18243-misconfigured-windows-named-pipe-permissions-in-accsvc-exe-allows-for-remote-code-execution
• https://github.com/advisories/GHSA-72mp-7jph-388p
• https://sensepost.com/blog/2025/pwning-asus-driverhub-msi-center-acer-control-centre-and-razer-synapse-4/
• https://gbhackers.com/acer-control-center-flaw/
• https://cyberpress.org/acer-control-center-vulnerability/
• https://www.twcert.org.tw/tw/cp-132-10180-36818-1.html
• https://www.varutra.com/ctp/threatpost/postDetails/Acer-ControlCenter-Security-Flaw-Exposes-Windows-to-Remote-Code-Execution/M1M2ODJoK3ZmWEtkcFNhWUZsVHhGUT09

Related Vulnerabilities

• PoCCVE-2026-0768: Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code
• PoCCVE-2026-2113: tpadmin <= 1.3.12 - Remote Code Execution
• PoCCVE-2026-34234: CtrlPanel <= 1.1.1 - Remote Code Execution
• PoCCVE-2026-41679: Paperclip - Remote Code Execution
• PoCCVE-2026-5562: Provectus kafka-ui <=0.7.2 - Remote Code Execution
• PoCCVE-2026-58123: Hermes WebUI < 0.51.788 - Remote Code Execution
• PoCCVE-2026-82222: GiveWP <= 4.16.7.1 - Remote Code Execution
• PoCCVE-2026-41042: Apache Gravitino < 1.2.1 - Unauthenticated Remote Code Execution
• PoCCVE-2026-40217: LiteLLM < 1.25.0 - Remote Code Execution
• PoCCVE-2026-45695: Kopia Server 0.23.0 - Remote Code Execution
• PoCCVE-2026-61511: vBulletin 6.x - Remote Code Execution
• PoCCVE-2019-11043: PHP-FPM Path Info Buffer Underflow - Remote Code Execution
• PoCCVE-2020-10204: Sonatype Nexus Repository Manager 3 - Remote Code Execution