{"id":"CVE-2026-119251","aliases":[],"cve":{"records":[{"id":"CVE-2026-119251","source":"Ubiquiti","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-29T17:33:17.479Z","published":"2026-10-29T18:29:46.417Z","modified":"2026-10-29T20:39:44.834Z"}],"publishers":[{"name":"Ubiquiti","role":"CNA","organizationId":"fe490ce8-0395-4072-90d8-2707e1bdf984","modified":"2026-10-29T18:29:46.417Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-29T20:39:44.834Z"}],"references":[{"url":"https://community.ui.com/releases/Security-Advisory-Bulletin-072/351a6d54-3ef7-49b4-ac99-b3a5388a9808","tags":[],"source":"Ubiquiti"}],"weaknesses":[{"id":"CWE-284","description":"CWE-284: Improper Access Control","source":"Ubiquiti"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-29T20:39:27.106841Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to…","titleSource":"Ubiquiti","descriptionSource":"Ubiquiti","description":"A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device.","score":6.7,"severity":"medium","published":"2026-10-29T18:29:46.417Z","modified":"2026-10-29T20:39:44.834Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Ubiquiti Inc","name":"WiFiman Desktop for macOS","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"1.3.0","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"Ubiquiti","url":"https://www.cve.org/CVERecord?id=CVE-2026-119251"}],"remediation":[],"references":["https://community.ui.com/releases/Security-Advisory-Bulletin-072/351a6d54-3ef7-49b4-ac99-b3a5388a9808"],"sources":[{"name":"CVE","id":"CVE-2026-119251","modified":"2026-10-29T20:39:44.834Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-119251"}],"assessments":[{"source":"Ubiquiti","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","score":6.7}],"sourceAffected":[],"observedAt":"2026-10-29T21:06:11.868Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T14:15:35.655Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-10-29T19:05:35.170Z","attemptedAt":"2026-10-29T19:05:35.170Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-29T19:05:34.836Z","attemptedAt":"2026-10-29T19:05:34.836Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-29T19:05:34.520Z","attemptedAt":"2026-10-29T19:05:34.520Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-29T19:05:35.001Z","attemptedAt":"2026-10-29T19:05:35.001Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-113330","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113330","modified":"Oct 29, 2026, 6:29:46 PM","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-10-29T19:05:34.520Z"}],"aiSummary":{"text":"A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability in WiFiman Desktop for macOS versions less than 1.3.0 to escalate privileges. The product is from Ubiquiti Inc. The impact is privilege escalation on the host device.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:44:33.839Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-119251"}]}}