{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2026-59106",
        "assignerOrgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
        "state": "PUBLISHED",
        "assignerShortName": "ENISA",
        "dateReserved": "2026-07-02T15:47:36.964Z",
        "datePublished": "2026-10-26T13:15:02.436Z",
        "dateUpdated": "2026-10-26T15:35:52.374Z"
    },
    "containers": {
        "cna": {
            "providerMetadata": {
                "orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
                "shortName": "ENISA",
                "dateUpdated": "2026-10-26T13:15:02.436Z"
            },
            "title": "Unauthenticated RCE Vulnerability in WolfProt interface implementation",
            "problemTypes": [
                {
                    "descriptions": [
                        {
                            "lang": "en",
                            "cweId": "CWE-78",
                            "description": "CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')",
                            "type": "CWE"
                        }
                    ]
                }
            ],
            "affected": [
                {
                    "vendor": "WolfVision",
                    "product": "Cynap Pure (Next Gen), Cynap Bridge",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "2.00c",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                },
                {
                    "vendor": "WolfVision",
                    "product": "Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.78a",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                },
                {
                    "vendor": "WolfVision",
                    "product": "Cynap Videobar, Firmware Version",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.72e",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                },
                {
                    "vendor": "WolfVision",
                    "product": "Cynap, Cynap Core, Cynap Pure SDM",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "versionType": "semver"
                        }
                    ],
                    "defaultStatus": "affected"
                }
            ],
            "descriptions": [
                {
                    "lang": "en",
                    "value": "A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service."
                        }
                    ]
                }
            ],
            "references": [
                {
                    "url": "https://wolfvision.com/de/security/cve-2026-59106-2",
                    "tags": [
                        "vendor-advisory"
                    ]
                }
            ],
            "metrics": [
                {
                    "format": "CVSS",
                    "scenarios": [
                        {
                            "lang": "en",
                            "value": "GENERAL"
                        }
                    ],
                    "cvssV4_0": {
                        "attackVector": "NETWORK",
                        "attackComplexity": "LOW",
                        "attackRequirements": "NONE",
                        "privilegesRequired": "NONE",
                        "userInteraction": "NONE",
                        "vulnConfidentialityImpact": "HIGH",
                        "subConfidentialityImpact": "NONE",
                        "vulnIntegrityImpact": "HIGH",
                        "subIntegrityImpact": "NONE",
                        "vulnAvailabilityImpact": "HIGH",
                        "subAvailabilityImpact": "NONE",
                        "exploitMaturity": "NOT_DEFINED",
                        "Safety": "NOT_DEFINED",
                        "Automatable": "NOT_DEFINED",
                        "Recovery": "NOT_DEFINED",
                        "valueDensity": "NOT_DEFINED",
                        "vulnerabilityResponseEffort": "NOT_DEFINED",
                        "providerUrgency": "NOT_DEFINED",
                        "version": "4.0",
                        "baseSeverity": "CRITICAL",
                        "baseScore": 9.3,
                        "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
                    }
                },
                {
                    "format": "CVSS",
                    "scenarios": [
                        {
                            "lang": "en",
                            "value": "GENERAL"
                        }
                    ],
                    "cvssV3_1": {
                        "version": "3.1",
                        "attackVector": "NETWORK",
                        "attackComplexity": "LOW",
                        "privilegesRequired": "NONE",
                        "userInteraction": "NONE",
                        "scope": "UNCHANGED",
                        "confidentialityImpact": "HIGH",
                        "integrityImpact": "HIGH",
                        "availabilityImpact": "HIGH",
                        "baseSeverity": "CRITICAL",
                        "baseScore": 9.8,
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
                    }
                }
            ],
            "workarounds": [
                {
                    "lang": "en",
                    "value": "Until an update can be applied, restrict network access to the \nWolfProt-related ports (TCP 50915 and 50917) as well as the web \nmanagement interfaces (TCP 80 and 443) to trusted hosts only. Note that \nthese services cannot be disabled. WolfVision recommends keeping devices up to date and using \ndedicated, managed network segments (VLAN or firewall zone) to restrict \ndevice access to trusted hosts only.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "<p>Until an update can be applied, restrict network access to the \nWolfProt-related ports (TCP 50915 and 50917) as well as the web \nmanagement interfaces (TCP 80 and 443) to trusted hosts only. Note that \nthese services cannot be disabled. WolfVision recommends keeping devices up to date and using \ndedicated, managed network segments (VLAN or firewall zone) to restrict \ndevice access to trusted hosts only.</p>"
                        }
                    ]
                }
            ],
            "credits": [
                {
                    "lang": "en",
                    "value": "National Test Institute for Cybersecurity (NTC)",
                    "type": "reporter"
                }
            ],
            "x_generator": {
                "engine": "Vulnogram 1.0.5"
            }
        },
        "adp": [
            {
                "metrics": [
                    {
                        "other": {
                            "type": "ssvc",
                            "content": {
                                "id": "CVE-2026-59106",
                                "role": "CISA Coordinator",
                                "options": [
                                    {
                                        "Exploitation": "none"
                                    },
                                    {
                                        "Automatable": "yes"
                                    },
                                    {
                                        "Technical Impact": "total"
                                    }
                                ],
                                "version": "2.0.3",
                                "timestamp": "2026-10-26T15:04:38.018668Z"
                            }
                        }
                    }
                ],
                "title": "CISA ADP Vulnrichment",
                "providerMetadata": {
                    "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
                    "shortName": "CISA-ADP",
                    "dateUpdated": "2026-10-26T15:35:52.374Z"
                }
            }
        ]
    }
}