zum Inhalt springen
back to overview print

Unauthenticated Remote Code Execution in WolfVision Cynap Products (Command Injection)

Peripheral Devices

NTCF:
CVE-2026-59106

CVE:
CVE-2026-59106

Product:
Cynap Pure (Next Gen), Cynap Bridge, Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro, Cynap Videobar, Cynap, Cynap Core, Cynap Pure SDM

Vendor:
WolfVision

Criticality:
high

Status:
fixed

Discovered:
2026-07-28

Detail:
Public

Vulnerable version:
Cynap Pure (Next Gen), Cynap Bridge: Firmware Version < v2.00c Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro: Firmware Version < v1.78a Cynap Videobar, Firmware Version < v1.72e Cynap, Cynap Core, Cynap Pure SDM: all firmware versions

Fixed version:
Cynap Pure (Next Gen), Cynap Bridge: Firmware Version v2.00c Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro: Firmware Version v1.78a Cynap Videobar, Firmware Version v1.72e

Summary

A critical security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.

WolfProt is the proprietary control protocol by WolfVision used for device management and integration. The vulnerable interface is reachable on the network ports listed below:

  • TCP 50915 (WolfProt, unencrypted)
  • TCP 50917 (WolfProt over TLS)

  • TCP 80 (WebSocket via HTTP)

  • TCP 443 (WebSocket via HTTPS)


The vulnerability allows unauthenticated attackers on the local network to run arbitrary commands on the system, potentially allowing full system compromise.

Remediation

Affected devices should be updated to the following firmware versions as soon as possible:

  • Cynap Pure (Next Gen), Cynap Bridge: firmware version v2.00c
  • Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro: firmware version v1.78a

  • Cynap Videobar: firmware version v1.72e

These models are affected and will receive no firmware fix:

  • Cynap

  • Cynap Core

  • Cynap Pure SDM


No firmware fix is planned for these discontinued models. Decommission them when feasible, or restrict access to the affected services to trusted hosts and networks.

 

Acknowledgements

We thank WolfVision for their professionalism and timely action throughout the coordinated disclosure process.

Timeline

2026-07-28: initial discovery

2026-07-30: first contact to vendor

2026-07-30: private disclosure to vendor

2026-10-21: fix by vendor

2026-10-21: public disclosure