NTCF:
CVE-2026-70379
CVE:
CVE-2026-70379
Product:
Cynap Pro, Cynap Core Pro, Cynap, Cynap Core
Vendor:
WolfVision
Criticality:
high
Status:
fixed
Discovered:
2026-07-28
Detail:
Public
Vulnerable version:
Cynap Pro, Cynap Core Pro: Firmware Version < v1.78a, Cynap, Cynap Core: all firmware versions
Fixed version:
Cynap Pro, Cynap Core Pro: v1.78a
Summary
When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted.
This vulnerability only affects devices with the vSolution Matrix feature enabled.
Potential impacts include unauthorized viewing or capture of presentation content, including confidential information that may be displayed, by an unauthenticated host on the same local network segment.
Remediation
Affected devices should be updated to the following firmware versions as soon as possible:
- Cynap Pro, Cynap Core Pro: firmware version v1.78a
These models are affected and will receive no firmware fix:
-
Cynap
-
Cynap Core
No firmware fix is planned for these discontinued models. Decommission them when feasible, or restrict access to the affected services to trusted hosts and networks.
Timeline
2026-07-28: initial discovery
2026-07-30: first contact to vendor
2026-07-30: private disclosure to vendor
2026-10-21: fix by vendor
2026-10-21: public disclosure