Vulnerability record/PUBLISHED/Published Oct 29, 2026 18:26:35 UTC

CVE-2026-119250

A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop to execute arbitrary commands with root privileges on the host device.

Base score7.8/ 10

SeverityHighCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityHigh

Attack vectorLocalAV

Attack complexityLowAC

Privileges requiredLowPR

User interactionNoneUI

ScopeUnchangedS

Confidentiality impactHighC

Integrity impactHighI

Availability impactHighA

CVSS vector stringCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering AuthorityUbiquiti

Last updatedOct 31, 2026 13:15:01 UTC

PublishedOct 29, 2026 18:26:35 UTC

ReservedOct 29, 2026 17:33:16 UTC