Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-59106 EUVD-2026-109816GHSA-rwp5-547m-r274

Unauthenticated RCE Vulnerability in WolfProt interface implementation

Published Oct 26, 2026 · Updated Oct 26, 2026 · Assigned by ENISA

Description

A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.

Affected products

VendorProductAffectedFixed
WolfVision Cynap Pure (Next Gen), Cynap Bridge < 2.00c 2.00c
WolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro < 1.78a 1.78a
WolfVision Cynap Videobar, Firmware Version < 1.72e 1.72e
WolfVision Cynap, Cynap Core, Cynap Pure SDM — —

References