Livewallpaper
Monthly
Missing authentication on the SignalR hub of GiantappMan LiveWallPaper 2.6.8.0's local server component lets remote attackers invoke the /LiveWallpaper/UploadFile endpoint without any credentials or user interaction, giving low-level confidentiality, integrity and availability impact (CVSS 4.0 base 6.9). Pre-patch code in the same request path also lacks path normalization and file-extension filtering, so the same unauthenticated channel can be abused for file writes outside the wallpaper directory and for uploading executable files. A public PoC reference exists; it is not verified as working exploit code, no CISA KEV entry is associated with this CVE, and the practical exposure depends on whether the LocalServer listens beyond loopback on the Windows host.
Missing authentication on the SignalR hub of GiantappMan LiveWallPaper 2.6.8.0's local server component lets remote attackers invoke the /LiveWallpaper/UploadFile endpoint without any credentials or user interaction, giving low-level confidentiality, integrity and availability impact (CVSS 4.0 base 6.9). Pre-patch code in the same request path also lacks path normalization and file-extension filtering, so the same unauthenticated channel can be abused for file writes outside the wallpaper directory and for uploading executable files. A public PoC reference exists; it is not verified as working exploit code, no CISA KEV entry is associated with this CVE, and the practical exposure depends on whether the LocalServer listens beyond loopback on the Windows host.