CVE-2026-59106
Critical
Description
A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.
SeverityCritical
CVSS9.8
Exploit probability—
ProductCynap Pure (Next Gen), Cynap Bridge
PublishedOct 26, 2026
First seenOct 26, 2026
Weakness typeCWE-78OS command injection
How to fix
Update
- WolfVision Cynap Pure (Next Gen), Cynap Bridge2.00c or later
- WolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro1.78a or later
- WolfVision Cynap Videobar, Firmware Version1.72e or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WolfVision Cynap Pure (Next Gen), Cynap Bridge | v < 2.00c | 2.00c |
| WolfVision Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro | v < 1.78a | 1.78a |
| WolfVision Cynap Videobar, Firmware Version | v < 1.72e | 1.72e |
| WolfVision Cynap, Cynap Core, Cynap Pure SDM | 0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.