CVE-2026-70380: WolfVision MICE service denial of service

CVE-2026-70380 · Severity: medium · CVSS 5.3 · Published 2026-10-26

WolfVision's Miracast over Infrastructure Connection Establishment (MICE) service, used to enable wireless display streaming in meeting room systems, contains a flaw that allows unauthenticated attackers to exhaust connection capacity. An attacker can prevent legitimate users from establishing Miracast connections, disrupting workplace collaboration and presentation capabilities. The vulnerability only affects MICE, which is disabled by default and must be explicitly enabled; standard Miracast P2P connectivity is unaffected on most devices.

Technologies: WolfVision Cynap Core Pro, WolfVision Cynap Pro, WolfVision Cynap Pure, WolfVision Cynap Pure (Next Gen), WolfVision Cynap Pure Mini, WolfVision Cynap Pure Pro, WolfVision Cynap Videobar. Vendors: WolfVision.

Quick answers

Is CVE-2026-70380 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-70380 being exploited in the wild.
How severe is CVE-2026-70380?
Medium severity, with a CVSS score of 5.3, published 26 October 2026.
Which products and versions are affected?
WolfVision Cynap Core Pro before v1.78a; WolfVision Cynap Pro before v1.78a; WolfVision Cynap Pure before v1.78a; WolfVision Cynap Pure (Next Gen) before v2.00d; and 3 more.
Is there a fix for CVE-2026-70380?
Yes: fixed in Cynap Pure (Next Gen) v2.00d, Cynap Pro/Core Pro/Pure/Pure Mini/Pure Pro v1.78a, Cynap Videobar v1.72e. Until then: Restrict access to MICE service on TCP port 7250 to trusted hosts only using firewall or network access controls. WolfVision recommends using dedicated managed network segments (VLAN or firewall zones) to limit device access to trusted hosts.</anigation> <parameter name="timeline">[ {"kind": "disclosed", "at": "2026-09-21"}, {"kind": "advisory", "at": "2026-10-26"} ] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-70380 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-70380?
Check whether you run WolfVision Cynap Core Pro, WolfVision Cynap Pro, WolfVision Cynap Pure or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • Fixed in: Cynap Pure (Next Gen) v2.00d, Cynap Pro/Core Pro/Pure/Pure Mini/Pure Pro v1.78a, Cynap Videobar v1.72e

Restrict access to MICE service on TCP port 7250 to trusted hosts only using firewall or network access controls. WolfVision recommends using dedicated managed network segments (VLAN or firewall zones) to limit device access to trusted hosts.</anigation> <parameter name="timeline">[ {"kind": "disclosed", "at": "2026-09-21"}, {"kind": "advisory", "at": "2026-10-26"} ]

Technical details

An uncontrolled resource consumption vulnerability (CWE-400) exists in the MICE service due to insufficient connection limiting. An unauthenticated network attacker can open multiple simultaneous connections to TCP port 7250 to exhaust available connection slots, causing a denial of service. The fix limits the number of simultaneous connections accepted from each source.

Affected products

  • WolfVision Cynap Pure (Next Gen) before v2.00d
  • WolfVision Cynap Pro before v1.78a
  • WolfVision Cynap Core Pro before v1.78a
  • WolfVision Cynap Pure before v1.78a
  • WolfVision Cynap Pure Mini before v1.78a
  • WolfVision Cynap Pure Pro before v1.78a
  • WolfVision Cynap Videobar before v1.72e

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.