CVE-2026-59106 Unauthenticated RCE Vulnerability in WolfProt interface implementation
CriticalCVSS 9.3
EPSS 0.55%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WolfVision Cynap Pure (Next Gen), Cynap Bridge | < 2.00c | 2.00c |
| WolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro | < 1.78a | 1.78a |
| WolfVision Cynap Videobar, Firmware Version | < 1.72e | 1.72e |
| WolfVision Cynap, Cynap Core, Cynap Pure SDM | = 0 | No fix listed |
References
- wolfvision.com vendor-advisory