Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-116110— GiantappMan LiveWallPaper SignalR Hub UploadFile missing authentication

Quick assessment

Affected
GiantappMan LiveWallPaper
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Windows 平台上的 GiantappMan LiveWallPaper 2.6.8.0 中发现了一个安全漏洞。该问题影响 SignalR Hub 组件对 文件的某些未知处理逻辑。攻击者通过操纵该流程可导致认证缺失。此攻击可远程实施，且利用方法已被公开，存在被实际利用的风险。修复补丁的标识为 b62f878899adbfc2968e3345442f3a3df91b774d。建议尽快安装该补丁以解决此问题。厂商已在此漏洞披露初期收到相关通知。

CVSS 7.3 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-116110

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
GiantappMan LiveWallPaper SignalR Hub UploadFile missing authentication
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows. This issue affects some unknown processing of the file /LiveWallpaper/UploadFile of the component SignalR Hub. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The patch is named b62f878899adbfc2968e3345442f3a3df91b774d. It is suggested to install a patch to address this issue. The vendor was contacted early about this disclosure.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
GiantappMan LiveWallPaper 2.6.8.0 cpe:2.3:a:giantappman:livewallpaper:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-116110

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-116110

请登录查看更多情报信息。

Security Blog Posts for CVE-2026-116110 (1)

Vendor Pages for CVE-2026-116110 (1)

Other References for CVE-2026-116110 (1)

IV. Related Vulnerabilities

Same product: LiveWallPaper
Same weakness: CWE-306