{"id":"CVE-2026-59106","revision":"6be357eafba843c9b88e366cb99048fa","records":[{"revision":"6be357eafba843c9b88e366cb99048fa","observedAt":"2026-10-26T16:35:30.797+00:00","statement":{"source":"cve-program","id":"CVE-2026-59106","aliases":[],"title":"Unauthenticated RCE Vulnerability in WolfProt interface implementation","description":"A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.","state":0,"publishedAt":"2026-10-26T13:15:02.436+00:00","modifiedAt":"2026-10-26T15:35:52.374+00:00","affected":[{"ecosystem":"Vendor product","name":"Cynap Pure (Next Gen), Cynap Bridge","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"WolfVision\",\n                    \"product\": \"Cynap Pure (Next Gen), Cynap Bridge\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"2.00c\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"WolfVision\",\n                    \"product\": \"Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"1.78a\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"Cynap Videobar, Firmware Version","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"WolfVision\",\n                    \"product\": \"Cynap Videobar, Firmware Version\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"1.72e\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"Cynap, Cynap Core, Cynap Pure SDM","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"WolfVision\",\n                    \"product\": \"Cynap, Cynap Core, Cynap Pure SDM\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"affected\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":9.3,"severity":"CRITICAL"},{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":"CRITICAL"}],"references":["https://wolfvision.com/de/security/cve-2026-59106-2"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-59106","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-59106","identifiers":["CVE-2026-59106"]},"retained":false,"historicalAffected":[]}],"coverage":[]}