PT-2026-2405 · Connectify · Connectify Hotspot 2018

Samalucard · Published 2026-01-13 · Updated 2026-01-14 · CVE-2022-50929

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Connectify Hotspot 2018

Description Connectify Hotspot 2018 contains a flaw due to an unquoted service path in the ConnectifyService executable. This allows local attackers to potentially execute arbitrary code. The issue stems from the unquoted path 'C:Program Files (x86)ConnectifyConnectifyService.exe', which can be exploited to inject malicious executables and escalate privileges.

Recommendations Apply updated security measures to properly quote the service path for the ConnectifyService executable.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2022-50929

Affected Products

Connectify Hotspot 2018

References · 5

• 🔥 https://exploit-db.com/exploits/50764 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50929 · Security Note
• https://connectify.me · Note
• https://vulncheck.com/advisories/connectify-hotspot-connectifyservice-unquoted-service-path · Note
• https://twitter.com/CVEnew/status/2011383057039700013 · Twitter Post