{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/wifiman-desktop/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ui:wifiman_desktop:*:*:*:*:*:macos:*:*"],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-119250"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["WiFiman Desktop"],"_cs_severities":["high"],"_cs_tags":["macos","privilege-escalation","vulnerability"],"_cs_type":"advisory","_cs_vendors":["Ubiquiti"],"content_html":"\u003cp\u003eUbiquiti WiFiman Desktop for macOS contains an External Control of File Name or Path vulnerability (CVE-2026-119250). A local attacker with low-privileged access can exploit this flaw to execute arbitrary commands with root privileges. No specific public exploit code or patch status is detailed in the advisory beyond the existence of the vulnerability.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a local, unprivileged attacker to escalate their privileges to root on the affected macOS host, potentially leading to full system compromise.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eInventory all macOS endpoints running WiFiman Desktop. Restrict local user access to the directory structures associated with the application, or uninstall the software until a security update is provided by the vendor.\u003c/p\u003e\n","date_modified":"2026-10-29T21:10:16Z","date_published":"2026-10-29T21:10:16Z","id":"https://feed.craftedsignal.io/briefs/2026-10-wifiman-privilege-escalation/","summary":"A local, low-privileged user can exploit an External Control of File Name or Path vulnerability in Ubiquiti WiFiman Desktop for macOS to execute arbitrary commands as root.","title":"Ubiquiti WiFiman Desktop: Local privilege escalation (CVE-2026-119250)","url":"https://feed.craftedsignal.io/briefs/2026-10-wifiman-privilege-escalation/"}],"language":"en","title":"CraftedSignal Threat Feed - WiFiman Desktop","version":"https://jsonfeed.org/version/1.1"}