[ CVE-2026-119250 · Published 29 Oct 2026 ]
Vulnerability in Ubiquiti Inc WiFiman Desktop
CVSS 7.8
EPSS <1%No fix listed yet
[ Description ]Official description
A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop to execute arbitrary commands with root privileges on the host device.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.