{"id":"CVE-2026-119249","kind":"vulnerability","aliases":["CVE-2026-119249"],"related":[],"title":"WiFiman Desktop for macOS: unrestricted IP binding leaks host device information","description":"A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop for macOS to obtain information about the host device.","summary":"WiFiman Desktop for macOS binds a service to an unrestricted IP address, so someone on the same network can reach it and read information about the Mac. Fixed in 1.3.0. CVSS 7.5 (AV:N/PR:N/UI:N, confidentiality high).","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"WiFiman Desktop for macOS","fixed":["1.3.0"],"affected":"< 1.3.0","ecosystem":"vendor"}],"ecosystems":[],"tags":["desktop-app","macos","network","other","ubiquiti","wifiman"],"not_affected_if":["wifiman-not-installed"],"how_to_check":"Open WiFiman Desktop on each Mac and check the version (WiFiman Desktop > About), or read CFBundleShortVersionString of /Applications/WiFiman Desktop.app (bundle id ui.wifiman-desktop). Anything below 1.3.0 should be updated; Ubiquiti's bulletin lists 1.1.3 and earlier, NVD lists everything below 1.3.0.","fix":"Update WiFiman Desktop for macOS to version 1.3.0 or later (Ubiquiti Security Advisory Bulletin 072).","status":"open","published_at":"2026-10-29T19:17:21+00:00","first_seen_at":"2026-10-29T19:26:48+00:00","triaged_at":"2026-10-29T19:27:24+00:00","updated_at":"2026-10-29T19:29:47+00:00","category":"other","confidence":0.85,"triage":{"at":"2026-10-29T19:27:24Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"WiFiman Desktop for macOS: unrestricted IP binding leaks host device information","impact":"low","summary":"WiFiman Desktop for macOS binds to an unrestricted IP address, so a network attacker can reach it. An attacker on the network can obtain information about the host device.","audience":"everyone","category":"other","nicknames":[],"who_cares":["wifiman","macos","network"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker learns information about the host device over the network","analyst_note":"Find the affected and fixed WiFiman Desktop for macOS versions and whether the listener is on by default; the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-119249 is the only source given.","how_to_check":"- Check whether WiFiman Desktop for macOS is installed on Mac machines in use\n- Check the installed version against the fixed version, which the sources do not state: unknown","plain_action":"unknown","needs_analyst":true,"not_affected_if":["wifiman-not-installed"],"who_is_affected":"People who run WiFiman Desktop for macOS on a laptop or desktop connected to a network that others can reach. The sources do not say which versions are affected or whether the default configuration is exposed.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000657,"input_tokens":4085,"output_tokens":498,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the affected and fixed WiFiman Desktop for macOS versions and whether the listener is on by default; the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-119249 is the only source given.","search":"'-119249':14A,17A '-2026':13A,16A '1.3.0':59B '7.5':61B 'access':72C 'actor':70C 'address':41B,84C 'app':24B 'av':62B 'bind':7A,34B,79C 'confidenti':66B 'could':76C 'cve':12A,15A 'cvss':60B 'desktop':2A,19A,23B,31B,89C 'desktop-app':22B 'devic':10A,98C 'exploit':77C 'fix':57B 'for':20A 'found':86C 'high':67B 'host':9A,97C 'inform':11A,53B,94C 'ip':6A,40B,83C 'leak':8A 'mac':56B 'maco':4A,25B,33B,91C 'macos':21A 'malici':69C 'n':65B 'n/pr':63B 'n/ui':64B 'network':26B,47B,75C 'obtain':93C 'reach':49B 'read':52B 'servic':36B 'someon':43B 'ubiqu':28B 'unrestrict':5A,39B,82C 'vulner':85C 'wifiman':1A,18A,29B,30B,88C","nicknames":[],"mitigations":[],"who_affected":"Any Mac running WiFiman Desktop for macOS older than 1.3.0 (Ubiquiti lists 1.1.3 and earlier; NVD lists everything below 1.3.0) is exposed to someone on the same network, who needs no login to read information about the machine. Check Macs where staff or admins installed WiFiman for network troubleshooting or Teleport. Windows, Linux and iOS builds are not named, and Macs without the app or already on 1.3.0 can skip it.","tier":"B","verified":{"fix":{"at":"2026-10-29T19:29:47Z","by":"analyst","doc":"https://community.ui.com/releases/WiFiman-Desktop-1-3-0/1125a09a-f4ec-4a8a-9fc4-1562d7c7e151","run_id":1104},"products":{"at":"2026-10-29T19:29:47Z","by":"analyst","doc":"https://community.ui.com/releases/WiFiman-Desktop-1-3-0/1125a09a-f4ec-4a8a-9fc4-1562d7c7e151","run_id":1104},"how_to_check":{"at":"2026-10-29T19:29:47Z","by":"analyst","doc":"https://community.ui.com/releases/WiFiman-Desktop-1-3-0/1125a09a-f4ec-4a8a-9fc4-1562d7c7e151","run_id":1104},"who_affected":{"at":"2026-10-29T19:29:47Z","by":"analyst","doc":"https://community.ui.com/releases/WiFiman-Desktop-1-3-0/1125a09a-f4ec-4a8a-9fc4-1562d7c7e151","run_id":1104}},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"first_public_at":"2026-10-29T19:17:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"fe490ce8-0395-4072-90d8-2707e1bdf984","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119249","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119249","severity":null,"published_at":"2026-10-29T19:17:21+00:00","modified_at":"2026-10-29T19:17:21+00:00","first_seen_at":"2026-10-29T19:26:48+00:00","fetched_at":"2026-10-29T19:26:48+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-119249:1104","url":null,"severity":null,"published_at":"2026-10-29T19:29:47+00:00","modified_at":"2026-10-29T19:29:47+00:00","first_seen_at":"2026-10-29T19:29:47+00:00","fetched_at":"2026-10-29T19:29:47+00:00","note":"Ubiquiti Security Advisory Bulletin 072 (primary): fixed in WiFiman Desktop for macOS 1.3.0. Bulletin says affected 1.1.3 and earlier; NVD CNA data says <1.3.0, so 1.2.x status is ambiguous. Default listener state/port not stated by vendor: unknown. No exploitation or PoC found. Reporter Andrew MacPherson; same bulletin has CVE-2026-119250/119251."}],"documents":[{"id":18906,"url":"https://community.ui.com/releases/Security-Advisory-Bulletin-072/351a6d54-3ef7-49b4-ac99-b3a5388a9808","title":"Ubiquiti Security Advisory Bulletin 072","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":18907,"url":"https://community.ui.com/releases/WiFiman-Desktop-1-3-0/1125a09a-f4ec-4a8a-9fc4-1562d7c7e151","title":"WiFiman Desktop 1.3.0","kind":"release","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"fix","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}