Is CVE-2026-70379 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-70379 being exploited in the wild.

How severe is CVE-2026-70379?

Medium severity, with a CVSS score of 6.5, published 26 October 2026.

Which products and versions are affected?

WolfVision Cynap all firmware versions; WolfVision Cynap Core all firmware versions; WolfVision Cynap Core Pro firmware < v1.78a; WolfVision Cynap Pro firmware < v1.78a.

How is CVE-2026-70379 attacked?

It is attacked from the adjacent network or over the network, in a network appliance.

Am I affected by CVE-2026-70379?

Check whether you run WolfVision Cynap, WolfVision Cynap Core, WolfVision Cynap Core Pro or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-70379: WolfVision Cynap unencrypted RTSP stream exposure in vSolution Matrix

Q: Is there a fix for CVE-2026-70379?

Yes: fixed in Cynap Pro, Cynap Core Pro: firmware v1.78a. Cynap and Cynap Core: no fix available (discontinued models).. Until then: Disable the vSolution Matrix feature if not required. Restrict vSolution Matrix to networks containing only trusted Matrix stations. Block inbound TCP 554/8554 and outbound UDP multicast 5500–5507 on a firewall, or isolate affected devices on a dedicated VLAN. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-70379 attacked?

It is attacked from the adjacent network or over the network, in a network appliance.

Q: Am I affected by CVE-2026-70379?

Check whether you run WolfVision Cynap, WolfVision Cynap Core, WolfVision Cynap Core Pro or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-70379 · Severity: medium · CVSS 6.5 · Published 2026-10-26

WolfVision Cynap presentation systems with the vSolution Matrix feature enabled broadcast unencrypted video streams to any host on the same network without authentication. An attacker on the local network can view or record sensitive presentation content displayed on the device, including confidential information.

Technologies: WolfVision Cynap, WolfVision Cynap Core, WolfVision Cynap Core Pro, WolfVision Cynap Pro. Vendors: WolfVision.

Quick answers

Is CVE-2026-70379 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-70379 being exploited in the wild.
How severe is CVE-2026-70379?: Medium severity, with a CVSS score of 6.5, published 26 October 2026.
Which products and versions are affected?: WolfVision Cynap all firmware versions; WolfVision Cynap Core all firmware versions; WolfVision Cynap Core Pro firmware < v1.78a; WolfVision Cynap Pro firmware < v1.78a.
Is there a fix for CVE-2026-70379?: Yes: fixed in Cynap Pro, Cynap Core Pro: firmware v1.78a. Cynap and Cynap Core: no fix available (discontinued models).. Until then: Disable the vSolution Matrix feature if not required. Restrict vSolution Matrix to networks containing only trusted Matrix stations. Block inbound TCP 554/8554 and outbound UDP multicast 5500–5507 on a firewall, or isolate affected devices on a dedicated VLAN. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-70379 attacked?: It is attacked from the adjacent network or over the network, in a network appliance.
Am I affected by CVE-2026-70379?: Check whether you run WolfVision Cynap, WolfVision Cynap Core, WolfVision Cynap Core Pro or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Cynap Pro, Cynap Core Pro: firmware v1.78a. Cynap and Cynap Core: no fix available (discontinued models).

Disable the vSolution Matrix feature if not required. Restrict vSolution Matrix to networks containing only trusted Matrix stations. Block inbound TCP 554/8554 and outbound UDP multicast 5500–5507 on a firewall, or isolate affected devices on a dedicated VLAN.

Technical details

The vSolution Matrix feature broadcasts presentation content via unencrypted RTSP/RTP streams on TCP ports 554/8554 and UDP multicast ports 5500–5507 without requiring authentication. Any unauthenticated host on the same network segment can passively observe or capture the stream. The vulnerability only affects devices with vSolution Matrix enabled; fixes implement authentication to restrict access to registered Matrix stations and add admin warnings.

Affected products

WolfVision Cynap Pro firmware < v1.78a
WolfVision Cynap Core Pro firmware < v1.78a
WolfVision Cynap all firmware versions
WolfVision Cynap Core all firmware versions

Timeline

2026-09-21: disclosed
2026-10-26: advisory

References

https://wolfvision.com/de/security/cve-2026-70379-1

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.