Live › vulnerability › CVE-2026-116110
Go to dashboardGiantappMan LiveWallPaper 2.6.8.0 on Windows exposes a SignalR Hub file-upload path (/LiveWallpaper/UploadFile) that performs no authentication check. A remote attacker can reach it over the network without credentials, and a public exploit has been released.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 03:39 UTC. All times on this page are UTC.
Windows installations of GiantappMan LiveWallPaper version 2.6.8.0 that accept network connections to the SignalR hub. Machines where the app runs only locally and the port is not reachable from other hosts are less exposed. Other versions are not stated in the sources.
No product ranges from the sources yet.
2.6.8.0unknown port from sources)/LiveWallpaper/UploadFile in web or app logsb62f878899adbfc2968e3345442f3a3df91b774d, or move to a release that includes it (version unknown from sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows. This issue affects some unknown processing of the file /LiveWallpaper/UploadFile of the component SignalR Hub. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The patch is named b62f878899adbfc2968e3345442f3a3df91b774d. It is suggested to install a patch to address this issue. The vendor was contacted early about this disclosure.
This page as .md · .json · in your agent: get_signal("CVE-2026-116110")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.