Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.2
CVE-2026-59107: Wolfvision Cynap Matrix sharing lets attacker log in as root
CVE-2026-59107 · published 19 days ago
Summary
The file‑sharing function of Wolfvision Cynap devices that act as a main or master station can use a shared SSH key. If an attacker obtains the matching private key, they can log in to the device as the root user via SSH. Disable the Matrix file‑sharing feature or replace the shared key with unique keys on each device to eliminate the risk.
What to do
- Update wolfvision cynap pro, cynap core pro to version 1.78a or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| wolfvision | cynap pro, cynap core pro | < 1.78a |
| wolfvision | cynap, cynap core | All versions |
Original advisory text
Shared SSH Authentication Key in vSolution Matrix File Sharing
A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.
References
- https://wolfvision.com/de/security/cve-2026-59107-1 vendor-advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-797Only Filtering Special Elements at an Absolute Position
Timeline
Published26 Oct 2026
Updated12 Nov 2026
First seen26 Oct 2026
Track software like this
Free during beta