Medium [CVE-2026-119251] malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device
This medium-severity Ubiquiti advisory covers CVE-2026-119251 affecting WiFiman Desktop for macOS.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published
Get an email when Ubiquiti publishes the next one.
VulniPulse checks Ubiquiti's security advisories around the clock and emails you new ones with the severity, the fixed version and the vendor's link. First month free, then US$15/month; we email you before the first charge.
Summary
A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device.
- WiFiman Desktop for macOS before 1.3.0
Official advisory · high-confidence parse· fetched 1 day ago·verify at source
Mitigation
Upgrade to a fixed release: 1.3.0. That is the remediation for this advisory.
The vendor advisory may list interim mitigations or workarounds not captured here. Review it before change work.
Official advisory · high-confidence parse· fetched 1 day ago·verify at source
More Ubiquiti advisories
- CVE-2026-119250Oct 29, 2026malicious actor with local access and low privileges could exploit an External Control
- CVE-2026-119249Oct 29, 2026malicious actor with access to the network could exploit a Binding to an Unrestricted IP
- CVE-2026-116839Oct 27, 2026malicious actor who lures an authenticated user to a malicious page could exploit
- CVE-2026-116838Oct 27, 2026malicious actor who lures an authenticated user to a malicious page could exploit
- CVE-2026-116837Oct 27, 2026malicious actor with access to the adjacent network could exploit a Heap-based Buffer
- CVE-2026-116836Oct 27, 2026malicious actor with access to the adjacent network and under certain conditions could
Android app · Google Play
Monitor future Ubiquiti CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.