Wondershare MobileGo 8.5.0 contains an insecure file permissions vulnerability that allows local users to modify executable files in the application directory. Attackers can replace the original MobileGo.exe with a malicious executable to create a new user account and add it to the Administrators group with full system access.
History

Fri, 13 Feb 2026 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Wondershare
Wondershare mobilego
Vendors & Products Wondershare
Wondershare mobilego

Thu, 12 Feb 2026 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Thu, 12 Feb 2026 19:30:00 +0000

Type Values Removed Values Added
Description Wondershare MobileGo 8.5.0 contains an insecure file permissions vulnerability that allows local users to modify executable files in the application directory. Attackers can replace the original MobileGo.exe with a malicious executable to create a new user account and add it to the Administrators group with full system access.
Title MobileGo 8.5.0 - Insecure File Permissions
Weaknesses CWE-732
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.5, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published: 2026-02-12T19:02:34.097Z

Updated: 2026-02-12T19:53:21.720Z

Reserved: 2026-02-12T18:28:32.258Z

Link: CVE-2019-25344

cve-icon Vulnrichment

Updated: 2026-02-12T19:53:12.268Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-02-12T20:16:01.233

Modified: 2026-02-13T14:23:48.007

Link: CVE-2019-25344

cve-icon Redhat

No data.