---
id: "CVE-2026-59106"
kind: "vulnerability"
aliases: ["CVE-2026-59106"]
title: "WolfProt interface: unauthenticated network attacker can run OS commands"
severity: "critical"
cvss: 9.8
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "Cynap Pure (Next Gen) / Cynap Bridge firmware", "fixed": ["2.00c"], "affected": "< 2.00c", "ecosystem": "vendor"}, {"name": "Cynap Pro / Core Pro / Receiver / Pure / Pure Mini / Pure Pro firmware", "fixed": ["1.78a"], "affected": "< 1.78a", "ecosystem": "vendor"}, {"name": "Cynap Videobar firmware", "fixed": ["1.72e"], "affected": "< 1.72e", "ecosystem": "vendor"}, {"name": "Cynap / Cynap Core / Cynap Pure SDM", "fixed": [], "affected": "all versions", "ecosystem": "vendor"}]
ecosystems: []
tags: ["av-equipment", "cynap", "embedded", "firmware", "network-service", "other", "wolfprot", "wolfvision"]
not_affected_if: ["firewalled-ports", "not-network-reachable"]
published_at: "2026-10-26T14:16:38+00:00"
first_seen_at: "2026-10-26T14:30:37+00:00"
updated_at: "2026-10-26T14:33:03+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59106", "first_seen_at": "2026-10-26T14:30:37+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-26T14:33:03+00:00"}]
---

# WolfProt interface: unauthenticated network attacker can run OS commands

The WolfProt interface implementation does not neutralize user-controlled input, so input can reach operating-system command execution. An unauthenticated attacker with network access to a vulnerable service can run commands with the privileges of that application service.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Cynap Pure (Next Gen) / Cynap Bridge firmware affected < 2.00c fixed 2.00c
- vendor:Cynap Pro / Core Pro / Receiver / Pure / Pure Mini / Pure Pro firmware affected < 1.78a fixed 1.78a
- vendor:Cynap Videobar firmware affected < 1.72e fixed 1.72e
- vendor:Cynap / Cynap Core / Cynap Pure SDM affected all versions fixed ?

## How to check

Open the device's firmware/system info and compare to the fixed version for your model: Cynap Pure (Next Gen)/Cynap Bridge < v2.00c; Cynap Pro/Core Pro/Receiver/Pure/Pure Mini/Pure Pro < v1.78a; Cynap Videobar < v1.72e; Cynap, Cynap Core, Cynap Pure SDM: always affected. Also check which hosts can reach TCP 50915, 50917, 80, 443 on the device.

## Fix

Update firmware: Cynap Pure (Next Gen)/Cynap Bridge to v2.00c or later (v2.00d is the latest listed); Cynap Pro, Core Pro, Receiver, Pure, Pure Mini, Pure Pro to v1.78a; Cynap Videobar to v1.72e. Cynap, Cynap Core, Cynap Pure SDM are discontinued with no fix: decommission or restrict access to trusted hosts.

## Timeline

- 2026-10-26T14:30:37+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-59106
- 2026-10-26T14:33:03+00:00 analyst — Read WolfVision's own advisory (published 2026-09-21): WolfProt OS command injection in Cynap/Visualizer-line devices; fixed firmware listed; no known exploitation per vendor; no PoC searched/found.

## Documents

- [advisory] WolfVision Security Advisory CVE-2026-59106 https://wolfvision.com/en/security/cve-2026-59106

## From the sources

A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_