Search
Find a vulnerability
Search criteria
4 vulnerabilities found for Cynap Pro, Cynap Core Pro by WolfVision
CVE-2026-70379 (GCVE-0-2026-70379)
Vulnerability from nvd – Published: 2026-10-26 17:48 – Updated: 2026-10-26 17:48
VLAI
EPSS
VEX
Title
Unauthorized Access to vSolution Matrix RTSP
Summary
When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted. This vulnerability only affects devices with the vSolution Matrix feature enabled.
Severity
CWE
- CWE-319 - Cleartext transmission of sensitive information
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://wolfvision.com/de/security/cve-2026-70379-1 | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WolfVision | Cynap Pro, Cynap Core Pro |
Affected:
0 , < 1.78a
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Cynap Pro, Cynap Core Pro",
"vendor": "WolfVision",
"versions": [
{
"lessThan": "1.78a",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "National Test Institute for Cybersecurity (NTC)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted. This vulnerability only affects devices with the vSolution Matrix feature enabled.\u003cbr\u003e\u003cbr\u003e"
}
],
"value": "When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted. This vulnerability only affects devices with the vSolution Matrix feature enabled."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "ADJACENT",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-319",
"description": "CWE-319 Cleartext transmission of sensitive information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T17:48:55.829Z",
"orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"shortName": "ENISA"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://wolfvision.com/de/security/cve-2026-70379-1"
}
],
"title": "Unauthorized Access to vSolution Matrix RTSP",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Until an update can be applied, consider the following measures where operationally feasible:\u003cbr\u003e\u003cul\u003e\u003cli\u003eDisable the \"vSolution Matrix\" feature if it is not required.\u003c/li\u003e\u003cli\u003eRestrict vSolution Matrix to networks that contain only trusted Matrix stations.\u003c/li\u003e\u003c/ul\u003eIf network separation is not feasible, block the following on a firewall:\u003cul\u003e\u003cli\u003eInbound RTSP control: TCP 554 and 8554. The device redirects TCP 554 to 8554, and Matrix clients connect to 8554.\u003c/li\u003e\u003cli\u003eOutbound audio and video multicast from the device: UDP 5500-5503 by default.\u003c/li\u003e\u003cli\u003eOn Cynap Core and on Cynap Pro, also block inbound TCP 555 and 8555 and outbound UDP 5504-5507. These ports carry the second HDMI stream.\u003c/li\u003e\u003cli\u003eIf the multicast port base is not 5500 (see device settings), replace 5500-5503 with that base through base+3, and 5504-5507 with base+4 through base+7.\u003c/li\u003e\u003c/ul\u003eWolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only.\u003cbr\u003e"
}
],
"value": "Until an update can be applied, consider the following measures where operationally feasible:\n * Disable the \"vSolution Matrix\" feature if it is not required.\n * Restrict vSolution Matrix to networks that contain only trusted Matrix stations.\n\n\nIf network separation is not feasible, block the following on a firewall: * Inbound RTSP control: TCP 554 and 8554. The device redirects TCP 554 to 8554, and Matrix clients connect to 8554.\n * Outbound audio and video multicast from the device: UDP 5500-5503 by default.\n * On Cynap Core and on Cynap Pro, also block inbound TCP 555 and 8555 and outbound UDP 5504-5507. These ports carry the second HDMI stream.\n * If the multicast port base is not 5500 (see device settings), replace 5500-5503 with that base through base+3, and 5504-5507 with base+4 through base+7.\n\n\nWolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"assignerShortName": "ENISA",
"cveId": "CVE-2026-70379",
"datePublished": "2026-10-26T17:48:55.829Z",
"dateReserved": "2026-08-04T07:41:00.082Z",
"dateUpdated": "2026-10-26T17:48:55.829Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-59107 (GCVE-0-2026-59107)
Vulnerability from nvd – Published: 2026-10-26 13:33 – Updated: 2026-10-26 13:33
VLAI
EPSS
VEX
Title
Shared SSH Authentication Key in vSolution Matrix File Sharing
Summary
A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.
Severity
9.8 (Critical)
CWE
- CWE-797 - Use of Hard-coded Credentials
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://wolfvision.com/de/security/cve-2026-59107-1 | vendor-advisory |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| WolfVision | Cynap Pro, Cynap Core Pro |
Affected:
0 , < 1.78a
(custom)
|
|
| WolfVision | Cynap, Cynap Core |
Affected:
0
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Cynap Pro, Cynap Core Pro",
"vendor": "WolfVision",
"versions": [
{
"lessThan": "1.78a",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Cynap, Cynap Core",
"vendor": "WolfVision",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "National Test Institute for Cybersecurity (NTC)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled."
}
],
"value": "A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-797",
"description": "CWE-797 Use of Hard-coded Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T13:33:12.851Z",
"orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"shortName": "ENISA"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://wolfvision.com/de/security/cve-2026-59107-1"
}
],
"title": "Shared SSH Authentication Key in vSolution Matrix File Sharing",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Until an update can be applied, take the following measures where operationally feasible:\u003cbr\u003e\u003cul\u003e\u003cli\u003eDisable vSolution Matrix file sharing if the feature is not required.\u003c/li\u003e\u003cli\u003eRestrict access to the vSolution Matrix file sharing service on TCP port 50930 to trusted hosts only.\u003c/li\u003e\u003c/ul\u003eWolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only."
}
],
"value": "Until an update can be applied, take the following measures where operationally feasible:\n * Disable vSolution Matrix file sharing if the feature is not required.\n * Restrict access to the vSolution Matrix file sharing service on TCP port 50930 to trusted hosts only.\n\n\nWolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"assignerShortName": "ENISA",
"cveId": "CVE-2026-59107",
"datePublished": "2026-10-26T13:33:12.851Z",
"dateReserved": "2026-07-02T15:47:36.964Z",
"dateUpdated": "2026-10-26T13:33:12.851Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70379 (GCVE-0-2026-70379)
Vulnerability from cvelistv5 – Published: 2026-10-26 17:48 – Updated: 2026-10-26 17:48
VLAI
EPSS
VEX
Title
Unauthorized Access to vSolution Matrix RTSP
Summary
When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted. This vulnerability only affects devices with the vSolution Matrix feature enabled.
Severity
CWE
- CWE-319 - Cleartext transmission of sensitive information
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://wolfvision.com/de/security/cve-2026-70379-1 | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WolfVision | Cynap Pro, Cynap Core Pro |
Affected:
0 , < 1.78a
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Cynap Pro, Cynap Core Pro",
"vendor": "WolfVision",
"versions": [
{
"lessThan": "1.78a",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "National Test Institute for Cybersecurity (NTC)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted. This vulnerability only affects devices with the vSolution Matrix feature enabled.\u003cbr\u003e\u003cbr\u003e"
}
],
"value": "When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted. This vulnerability only affects devices with the vSolution Matrix feature enabled."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "ADJACENT",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-319",
"description": "CWE-319 Cleartext transmission of sensitive information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T17:48:55.829Z",
"orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"shortName": "ENISA"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://wolfvision.com/de/security/cve-2026-70379-1"
}
],
"title": "Unauthorized Access to vSolution Matrix RTSP",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Until an update can be applied, consider the following measures where operationally feasible:\u003cbr\u003e\u003cul\u003e\u003cli\u003eDisable the \"vSolution Matrix\" feature if it is not required.\u003c/li\u003e\u003cli\u003eRestrict vSolution Matrix to networks that contain only trusted Matrix stations.\u003c/li\u003e\u003c/ul\u003eIf network separation is not feasible, block the following on a firewall:\u003cul\u003e\u003cli\u003eInbound RTSP control: TCP 554 and 8554. The device redirects TCP 554 to 8554, and Matrix clients connect to 8554.\u003c/li\u003e\u003cli\u003eOutbound audio and video multicast from the device: UDP 5500-5503 by default.\u003c/li\u003e\u003cli\u003eOn Cynap Core and on Cynap Pro, also block inbound TCP 555 and 8555 and outbound UDP 5504-5507. These ports carry the second HDMI stream.\u003c/li\u003e\u003cli\u003eIf the multicast port base is not 5500 (see device settings), replace 5500-5503 with that base through base+3, and 5504-5507 with base+4 through base+7.\u003c/li\u003e\u003c/ul\u003eWolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only.\u003cbr\u003e"
}
],
"value": "Until an update can be applied, consider the following measures where operationally feasible:\n * Disable the \"vSolution Matrix\" feature if it is not required.\n * Restrict vSolution Matrix to networks that contain only trusted Matrix stations.\n\n\nIf network separation is not feasible, block the following on a firewall: * Inbound RTSP control: TCP 554 and 8554. The device redirects TCP 554 to 8554, and Matrix clients connect to 8554.\n * Outbound audio and video multicast from the device: UDP 5500-5503 by default.\n * On Cynap Core and on Cynap Pro, also block inbound TCP 555 and 8555 and outbound UDP 5504-5507. These ports carry the second HDMI stream.\n * If the multicast port base is not 5500 (see device settings), replace 5500-5503 with that base through base+3, and 5504-5507 with base+4 through base+7.\n\n\nWolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"assignerShortName": "ENISA",
"cveId": "CVE-2026-70379",
"datePublished": "2026-10-26T17:48:55.829Z",
"dateReserved": "2026-08-04T07:41:00.082Z",
"dateUpdated": "2026-10-26T17:48:55.829Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-59107 (GCVE-0-2026-59107)
Vulnerability from cvelistv5 – Published: 2026-10-26 13:33 – Updated: 2026-10-26 13:33
VLAI
EPSS
VEX
Title
Shared SSH Authentication Key in vSolution Matrix File Sharing
Summary
A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.
Severity
9.8 (Critical)
CWE
- CWE-797 - Use of Hard-coded Credentials
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://wolfvision.com/de/security/cve-2026-59107-1 | vendor-advisory |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| WolfVision | Cynap Pro, Cynap Core Pro |
Affected:
0 , < 1.78a
(custom)
|
|
| WolfVision | Cynap, Cynap Core |
Affected:
0
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Cynap Pro, Cynap Core Pro",
"vendor": "WolfVision",
"versions": [
{
"lessThan": "1.78a",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Cynap, Cynap Core",
"vendor": "WolfVision",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "National Test Institute for Cybersecurity (NTC)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled."
}
],
"value": "A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-797",
"description": "CWE-797 Use of Hard-coded Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T13:33:12.851Z",
"orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"shortName": "ENISA"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://wolfvision.com/de/security/cve-2026-59107-1"
}
],
"title": "Shared SSH Authentication Key in vSolution Matrix File Sharing",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Until an update can be applied, take the following measures where operationally feasible:\u003cbr\u003e\u003cul\u003e\u003cli\u003eDisable vSolution Matrix file sharing if the feature is not required.\u003c/li\u003e\u003cli\u003eRestrict access to the vSolution Matrix file sharing service on TCP port 50930 to trusted hosts only.\u003c/li\u003e\u003c/ul\u003eWolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only."
}
],
"value": "Until an update can be applied, take the following measures where operationally feasible:\n * Disable vSolution Matrix file sharing if the feature is not required.\n * Restrict access to the vSolution Matrix file sharing service on TCP port 50930 to trusted hosts only.\n\n\nWolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"assignerShortName": "ENISA",
"cveId": "CVE-2026-59107",
"datePublished": "2026-10-26T13:33:12.851Z",
"dateReserved": "2026-07-02T15:47:36.964Z",
"dateUpdated": "2026-10-26T13:33:12.851Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}