CVE-2026-116110
Received Received - Intake

Authentication Bypass in GiantappMan LiveWallPaper

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: VulDB

Description
A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows. This issue affects some unknown processing of the file /LiveWallpaper/UploadFile of the component SignalR Hub. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The patch is named b62f878899adbfc2968e3345442f3a3df91b774d. It is suggested to install a patch to address this issue. The vendor was contacted early about this disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-116110
EUVD
EUVD-2026-109602

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
GiantappMan LiveWallPaper 2.6.8.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an unauthenticated remote code execution (RCE) flaw in LiveWallPaper version 2.6.8.0 for Windows. The application exposes an ASP.NET Core SignalR management service on TCP port 5001 that listens on all network interfaces and accepts unauthenticated requests. An attacker can upload an executable file via the unauthenticated UploadFile endpoint and trigger execution through the SignalR hub, running the file with the user's privileges.

Detection Guidance

Check if TCP port 5001 is open and listening on all network interfaces (0.0.0.0:5001) using commands like 'netstat -ano | findstr 5001' on Windows or 'ss -tulnp | grep 5001' on Linux. Verify if unauthenticated requests can reach the SignalR hub endpoint /LiveWallpaper/UploadFile by attempting to access it via curl or a browser.

Impact Analysis

An attacker could exploit this to execute arbitrary commands on your system with your user privileges. This could allow them to access sensitive data, manipulate files, terminate processes, or even open a reverse shell for full control over your session. The attack can be performed remotely if the vulnerable port is accessible.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, file manipulation, and arbitrary command execution on the affected system. For GDPR, this may result in unauthorized processing of personal data, potential data breaches, and non-compliance with data protection requirements. Under HIPAA, it could expose protected health information (PHI) to unauthorized parties, violating confidentiality and security rules.

Mitigation Strategies

Block external access to port 5001 immediately using firewall rules. Restrict the service to localhost only. Avoid uploading executable files to the application. Apply the vendor patch b62f878899adbfc2968e3345442f3a3df91b774d if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116110. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart