WolfVision güvenlik açıkları (CVE)

4.1Orta

CVE-2026-70382 15 gün önce

Stored Cross-Site Scripting in Web Interface

WolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro; WolfVision Cynap Pure (Next Gen), Cynap Bridge; WolfVision Cynap Videobar; WolfVision Cynap, Cynap Core, Cynap Pure SDM

Some externally supplied values stored by the device may be rendered in the web interface without sufficient output encoding. An attacker who can influence one of these values could cause script execution in the browser of a user who views an affected page. E…

5.3Orta

CVE-2026-70381 15 gün önce

Unauthorized Access to Internal Web Resources

WolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro; WolfVision Cynap Pure (Next Gen), Cynap Bridge; WolfVision Cynap Videobar; WolfVision Cynap, Cynap Core, Cynap Pure SDM

An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface. The accessible resources do…

5.3Orta

CVE-2026-70380 15 gün önce

Resource Exhaustion in MICE Service

WolfVision Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro; WolfVision Cynap Pure (Next Gen); WolfVision Cynap Videobar; WolfVision Cynap, Cynap Core, Cynap Pure SDM

A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legi…

6.5Orta

CVE-2026-70379 15 gün önce

Unauthorized Access to vSolution Matrix RTSP

WolfVision Cynap Pro, Cynap Core Pro

When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to v…

9.8Kritik

CVE-2026-59107 16 gün önce

Shared SSH Authentication Key in vSolution Matrix File Sharing

WolfVision Cynap Pro, Cynap Core Pro; WolfVision Cynap, Cynap Core

A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vuln…

9.8Kritik

CVE-2026-59106 16 gün önce

Unauthenticated RCE Vulnerability in WolfProt interface implementation

WolfVision Cynap Pure (Next Gen), Cynap Bridge; WolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro; WolfVision Cynap Videobar, Firmware Version; WolfVision Cynap, Cynap Core, Cynap Pure SDM

A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system command…