Vulnerability details
CVE-2026-59107
WolfVision Cynap ProWolfVision Cynap
Shared SSH Authentication Key in vSolution Matrix File Sharing
CVSS 4.0
9.2Critical
Official description
A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.2Critical | 4.0 | CVEProject cvelistV5 (CNA) (ENISA) | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 9.8Critical | 3.1 | CVEProject cvelistV5 (CNA) (ENISA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| WolfVision | Cynap Pro, Cynap Core Pro | v < 1.78a | CVEProject cvelistV5 (CNA) |
| WolfVision | Cynap, Cynap Core | All | CVEProject cvelistV5 (CNA) |
References and advisories
1- https://wolfvision.com/de/security/cve-2026-59107-1 vendor-advisory
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-10-26
- Last updated
- 2026-11-03
- State
- Published
- Assigner (CNA)
- ENISA
- Kolun priority
- 21 · Low
Exploit prediction (EPSS)
0.35%
Probability of exploitation in 30 days
29.6%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-797Use of Hard-coded Credentials