Cpe:2.3:a:ui:wifiman_desktop:*:*:*:*:*:macos:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3auiwifiman_desktopmacos/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 21:10:16 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgUbiquiti WiFiman Desktop: Local privilege escalation (CVE-2026-119250)https://feed.craftedsignal.io/briefs/2026-10-wifiman-privilege-escalation/Thu, 29 Oct 2026 21:10:16 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-wifiman-privilege-escalation/A local, low-privileged user can exploit an External Control of File Name or Path vulnerability in Ubiquiti WiFiman Desktop for macOS to execute arbitrary commands as root.Ubiquiti WiFiman Desktop for macOS contains an External Control of File Name or Path vulnerability (CVE-2026-119250). A local attacker with low-privileged access can exploit this flaw to execute arbitrary commands with root privileges. No specific public exploit code or patch status is detailed in the advisory beyond the existence of the vulnerability.

Impact

Successful exploitation allows a local, unprivileged attacker to escalate their privileges to root on the affected macOS host, potentially leading to full system compromise.

Recommendation

Inventory all macOS endpoints running WiFiman Desktop. Restrict local user access to the directory structures associated with the application, or uninstall the software until a security update is provided by the vendor.

]]>highadvisorymacosprivilege-escalationvulnerability