# CVE-2026-59106: WolfVision Cynap devices OS command injection in WolfProt Source: https://junglewise.ai/threats/cve-2026-59106-a-security-vulnerability-has-been-identified-in-the-wolfprot Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Published: 2026-10-26. Updated: 2026-10-26 License: CC BY 4.0 with a link back CVE-2026-59106 · Severity: critical · CVSS 9.8 · Published 2026-10-26 WolfVision's Cynap family of devices use a proprietary WolfProt protocol for device management and control, reachable over multiple network ports. An unauthenticated attacker on the network can inject OS commands through insufficient input validation, executing arbitrary commands with the service's privileges and potentially gaining full control of the device or accessing sensitive data. Technologies: [WolfVision Cynap](https://junglewise.ai/threats/technologies/cynap), [WolfVision Cynap Bridge](https://junglewise.ai/threats/technologies/cynap-bridge), [WolfVision Cynap Core](https://junglewise.ai/threats/technologies/cynap-core), [WolfVision Cynap Core Pro](https://junglewise.ai/threats/technologies/cynap-core-pro), [WolfVision Cynap Pro](https://junglewise.ai/threats/technologies/cynap-pro), [WolfVision Cynap Pure](https://junglewise.ai/threats/technologies/cynap-pure), [WolfVision Cynap Pure (Next Gen)](https://junglewise.ai/threats/technologies/cynap-pure-next-gen), [WolfVision Cynap Pure Mini](https://junglewise.ai/threats/technologies/cynap-pure-mini), [WolfVision Cynap Pure Pro](https://junglewise.ai/threats/technologies/cynap-pure-pro), [WolfVision Cynap Receiver](https://junglewise.ai/threats/technologies/cynap-receiver), [WolfVision Cynap Videobar](https://junglewise.ai/threats/technologies/cynap-videobar). Vendors: [WolfVision](https://junglewise.ai/threats/vendors/wolfvision). ## Quick answers **Is CVE-2026-59106 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-59106 being exploited in the wild. **How severe is CVE-2026-59106?** Critical severity, with a CVSS score of 9.8, published 26 October 2026. **Which products and versions are affected?** WolfVision Cynap all versions; WolfVision Cynap Bridge < v2.00c; WolfVision Cynap Core all versions; WolfVision Cynap Core Pro < v1.78a; and 8 more. **Is there a fix for CVE-2026-59106?** Yes: fixed in Cynap Pure (Next Gen), Cynap Bridge: v2.00c; Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro: v1.78a; Cynap Videobar: v1.72e. No fix available for Cynap, Cynap Core, or Cynap Pure SDM.. Until then: Restrict network access to WolfProt-related ports TCP 50915 and 50917, as well as web management interfaces on TCP 80 and 443, to trusted hosts only using firewall rules or dedicated network segments (VLAN). For discontinued models (Cynap, Cynap Core, Cynap Pure SDM) receiving no firmware fix, decommission them when feasible or restrict access to affected services to trusted hosts and networks. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve. **How is CVE-2026-59106 attacked?** It is attacked over the network, in a network appliance. **Am I affected by CVE-2026-59106?** Check whether you run WolfVision Cynap, WolfVision Cynap Bridge, WolfVision Cynap Core or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you. ## How to fix - Fixed in Cynap Pure (Next Gen), Cynap Bridge: v2.00c; Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro: v1.78a; Cynap Videobar: v1.72e. No fix available for Cynap, Cynap Core, or Cynap Pure SDM. Restrict network access to WolfProt-related ports TCP 50915 and 50917, as well as web management interfaces on TCP 80 and 443, to trusted hosts only using firewall rules or dedicated network segments (VLAN). For discontinued models (Cynap, Cynap Core, Cynap Pure SDM) receiving no firmware fix, decommission them when feasible or restrict access to affected services to trusted hosts and networks. ## Technical details The vulnerability is an OS command injection (CWE-78) in the WolfProt interface implementation resulting from insufficient neutralization of user-controlled input. An unauthenticated attacker with network access can exploit this via multiple ports (TCP 50915, 50917, 80, 443) to execute operating-system commands with the privileges of the WolfProt service. The fix involves ensuring all user input is passed safely as arguments to system calls rather than interpreted by a shell. ## Affected products - WolfVision Cynap Pure (Next Gen) < v2.00c - WolfVision Cynap Bridge < v2.00c - WolfVision Cynap Pro < v1.78a - WolfVision Cynap Core Pro < v1.78a - WolfVision Cynap Receiver < v1.78a - WolfVision Cynap Pure < v1.78a - WolfVision Cynap Pure Mini < v1.78a - WolfVision Cynap Pure Pro < v1.78a - WolfVision Cynap Videobar < v1.72e - WolfVision Cynap all versions - WolfVision Cynap Core all versions - WolfVision Cynap Pure SDM all versions ## Timeline - 2026-09-21: disclosed - 2026-10-26: advisory ## References - [https://wolfvision.com/de/security/cve-2026-59106-2](https://wolfvision.com/de/security/cve-2026-59106-2) ## Related threats - [WolfVision Cynap stored cross-site scripting in web interface](https://junglewise.ai/threats/cve-2026-70382-some-externally-supplied-values-stored-by-the-device-may-be) - [WolfVision Cynap web server access control bypass](https://junglewise.ai/threats/cve-2026-70381-an-access-control-vulnerability-has-been-identified-in-the-web) - [WolfVision MICE service denial of service](https://junglewise.ai/threats/cve-2026-70380-a-denial-of-service-vulnerability-has-been-identified-in-the) - [WolfVision Cynap unencrypted RTSP stream exposure in vSolution Matrix](https://junglewise.ai/threats/cve-2026-70379-when-the-vsolution-matrix-feature-is-enabled-affected-devices-may) - [WolfVision vSolution Matrix hardcoded SSH key in file sharing](https://junglewise.ai/threats/cve-2026-59107-a-security-vulnerability-has-been-identified-in-the-vsolution)