Read the docs
TI-2026-80352 Aliases CVE-2026-59106GHSA-rwp5-547m-r274

OS command injection in WolfVision WolfProt interface

Priority MEDIUM 49CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

Several WolfVision Cynap products are affected, with versions before 2.00c, 1.78a or 1.72e depending on the product. Improper neutralization of special elements (CWE-78) lets user-controlled input reach operating system commands in the WolfProt interface implementation. An unauthenticated attacker with network access to a vulnerable service can run operating system commands with the privileges of the affected application service.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0055 46th percentileScored 2026-11-07
Fix Fixed Cynap Pure (Next Gen), Cynap Bridge (WolfVision): 2.00cCynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro (WolfVision): 1.78a+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
WolfVisionCynap Pure (Next Gen), Cynap Bridgebefore 2.00c2.00cPatch availableCNA
WolfVisionCynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Probefore 1.78a1.78aPatch availableCNA
WolfVisionCynap Videobar, Firmware Versionbefore 1.72e1.72ePatch availableCNA
WolfVisionCynap, Cynap Core, Cynap Pure SDMall versions—No fix listedCNA
  • Cynap Pure (Next Gen), Cynap Bridge VendorWolfVision Affected before 2.00c Fixed in 2.00c Patch available CNA
  • Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro VendorWolfVision Affected before 1.78a Fixed in 1.78a Patch available CNA
  • Cynap Videobar, Firmware Version VendorWolfVision Affected before 1.72e Fixed in 1.72e Patch available CNA
  • Cynap, Cynap Core, Cynap Pure SDM VendorWolfVision Affected all versions Fixed in — No fix listed CNA

Remediation

Update Cynap Pure (Next Gen) and Cynap Bridge to 2.00c, Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini and Cynap Pure Pro to 1.78a, and Cynap Videobar to 1.72e. The sources list no fixed version for Cynap, Cynap Core or Cynap Pure SDM.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA Cynap Pure (Next Gen), Cynap Bridge (WolfVision) Fixed in 2.00c
  • Fix · CNA Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro (WolfVision) Fixed in 1.78a
  • Fix · CNA Cynap Videobar, Firmware Version (WolfVision) Fixed in 1.72e

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    WolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro 1.78a

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2026-80580 Web server exposes internal resources in WolfVision Cynap devicesPriority LOW 36
    • TI-2026-80581 Stored cross-site scripting in WolfVision Cynap web interfacePriority LOW 23
    Show all 3 records →

Timeline

  1. 2026-10-26 Threatist record created from CVE-2026-59106
  2. 2026-10-26 CISA SSVC decision points changed
  3. 2026-10-27 Alias added: GHSA-rwp5-547m-r274

References

Advisory 1

  • TI-2026-80353 Shared SSH key in WolfVision vSolution Matrix file sharing CVSS 4.0CRITICAL 9.2
  • TI-2019-10032 WolfVision Cynap before 1.30j uses a static, hard-coded cryptographic secret for… CVSS 3.0CRITICAL 9.8
  • TI-2026-80580 Web server exposes internal resources in WolfVision Cynap devices CVSS 4.0MEDIUM 6.9
  • TI-2026-80569 Resource exhaustion in WolfVision Cynap MICE service CVSS 4.0MEDIUM 6.9
  • TI-2026-80533 WolfVision Cynap Unauthorized Access to vSolution Matrix RTSP Stream CVSS 4.0HIGH 7.1
  • TI-2026-80581 Stored cross-site scripting in WolfVision Cynap web interface CVSS 4.0MEDIUM 5.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences