CVE-2026-59106
Unauthenticated RCE Vulnerability in WolfProt interface implementation
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 2.00c, 1.78a, 1.72e
- Public exploit
- None on Exploit-DB
Summary
A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.
Affected versions
- WolfVision Cynap Pure (Next Gen), Cynap Bridge
fixed in 2.00c
- WolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro
fixed in 1.78a
- WolfVision Cynap Videobar, Firmware Version
fixed in 1.72e
- WolfVision Cynap, Cynap Core, Cynap Pure SDM
0