CVE-2026-116110
GiantappMan LiveWallPaper SignalR Hub UploadFile missing authentication
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows. This issue affects some unknown processing of the file /LiveWallpaper/UploadFile of the component SignalR Hub. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The patch is named b62f878899adbfc2968e3345442f3a3df91b774d. It is suggested to install a patch to address this issue. The vendor was contacted early about this disclosure.
| CWE | CWE-306 CWE-287 |
| Vendor | giantappman |
| Product | livewallpaper |
| Published | Oct 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for giantappman livewallpaper
Be the first to know when new high vulnerabilities affecting giantappman livewallpaper are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
GiantappMan / LiveWallPaper
2.6.8.0
References
vuldb.com: https://vuldb.com/vuln/426178 vuldb.com: https://vuldb.com/vuln/426178/cti vuldb.com: https://vuldb.com/cve/CVE-2026-116110 vuldb.com: https://vuldb.com/submit/1003156 github.com: https://github.com/GiantappMan/livewallpaper/issues/185 jfyuhong.github.io: https://jfyuhong.github.io/advisories/livewallpaper-2.6.8.0/ github.com: https://github.com/GiantappMan/livewallpaper/commit/b62f878899adbfc2968e3345442f3a3df91b774d github.com: https://github.com/GiantappMan/livewallpaper/
Credits
🔍 JFyuhong (VulDB User) JFyuhong (VulDB User) VulDB CNA Team