WolfVision

6 results · Feed

• Medium 4.1
  CVE-2026-70382

  Stored Cross-Site Scripting in Web Interface

  Some externally supplied values stored by the device may be rendered in the web interface without sufficient output encoding. An attacker who can influence one of these values could cause script execution in the browser of a user who views an affected page. E…

  WolfVision Cynap, Cynap Core, Cynap Pure SDM Cynap Pure (Next Gen), Cynap Bridge Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro
  Oct 26, 2026
• Medium 5.3
  CVE-2026-70381

  Unauthorized Access to Internal Web Resources

  An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface. The accessible resources do…

  WolfVision Cynap, Cynap Core, Cynap Pure SDM Cynap Pure (Next Gen), Cynap Bridge Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro
  Oct 26, 2026
• Medium 5.3
  CVE-2026-70380

  Resource Exhaustion in MICE Service

  A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legi…

  WolfVision Cynap, Cynap Core, Cynap Pure SDM Cynap Videobar Cynap Pure (Next Gen)
  Oct 26, 2026
• Medium 6.5
  CVE-2026-70379

  Unauthorized Access to vSolution Matrix RTSP

  When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to v…

  WolfVision Cynap Pro, Cynap Core Pro
  Oct 26, 2026
• Critical 9.8
  CVE-2026-59107

  Shared SSH Authentication Key in vSolution Matrix File Sharing

  A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vuln…

  WolfVision Cynap Pro, Cynap Core Pro Cynap, Cynap Core
  Oct 26, 2026
• Critical 9.8
  CVE-2026-59106

  Unauthenticated RCE Vulnerability in WolfProt interface implementation

  A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system command…

  WolfVision Cynap, Cynap Core, Cynap Pure SDM Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro Cynap Pure (Next Gen), Cynap Bridge
  Oct 26, 2026