CVE-2026-119250
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
A vulnerability in WiFiman Desktop involves external control of file name or path. A malicious actor with local access and low privileges could exploit this flaw to execute arbitrary commands with root privileges on the host device.
Risk Assessment
An attacker with local access and low privileges may gain full control over the device by executing commands as root. This leads to complete system compromise and a serious security breach.
Recommendation
Update WiFiman Desktop to the latest patched version. Restrict local user privileges and monitor for suspicious activity on the device.
Other vulnerabilities in WiFiman Desktop
See all- CVE-2026-119251Medium
WiFiman Desktop for macOS contains an Improper Access Control vulnerability. A malicious actor with local access and high privileges could exploit it to escalate privileges on the host device.
- CVE-2026-119249High
A vulnerability in WiFiman Desktop involves binding to an unrestricted IP address. A malicious actor with network access could exploit this flaw to obtain information about the host device.
Original NVD description (English source)
A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop to execute arbitrary commands with root privileges on the host device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS