{"id":"CVE-2026-70379","kind":"vulnerability","aliases":["CVE-2026-70379"],"related":[],"title":"vSolution Matrix: unauthenticated RTSP stream exposes screen content to network","description":"When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted. This vulnerability only affects devices with the vSolution Matrix feature enabled.","summary":"When the vSolution Matrix feature is enabled, the device publishes current screen content as an unencrypted RTSP/RTP stream with no authentication. Any host on the same network segment can view or capture presentation content.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","presentation-displays","rtsp","vsolution-matrix"],"not_affected_if":["isolated-network","vsolution-matrix-disabled"],"how_to_check":"- Check whether the vSolution Matrix feature is enabled on each device (unknown: the sources do not say where this setting lives)\n- Confirm which device models and firmware versions are affected (unknown: the sources do not list them)","fix":"- Disable the vSolution Matrix feature if it is not needed (unknown: the sources do not name a patched version)\n- Restrict network access to the device's RTSP/RTP ports to trusted hosts","status":"open","published_at":"2026-10-26T18:18:39+00:00","first_seen_at":"2026-10-26T18:31:44+00:00","triaged_at":"2026-10-26T18:33:52+00:00","updated_at":"2026-10-26T18:33:52+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-26T18:33:52Z","model":"claude-haiku-5-5","output":{"fix":"- Disable the vSolution Matrix feature if it is not needed (unknown: the sources do not name a patched version)\n- Restrict network access to the device's RTSP/RTP ports to trusted hosts","reach":"network","title":"vSolution Matrix: unauthenticated RTSP stream exposes screen content to network","impact":"medium","summary":"When the vSolution Matrix feature is enabled, the device publishes current screen content as an unencrypted RTSP/RTP stream with no authentication. Any host on the same network segment can view or capture presentation content.","category":"infrastructure","nicknames":[],"who_cares":["vsolution-matrix","presentation-displays","rtsp"],"confidence":0.6,"needs_auth":"no","worst_case":"Any host on the segment captures presentation screen content unencrypted.","analyst_note":"Find the vendor advisory and affected firmware versions and the patched release; the NVD entry alone gives no versions or settings path.","how_to_check":"- Check whether the vSolution Matrix feature is enabled on each device (unknown: the sources do not say where this setting lives)\n- Confirm which device models and firmware versions are affected (unknown: the sources do not list them)","needs_analyst":true,"not_affected_if":["vsolution-matrix-disabled","isolated-network"],"who_is_affected":"Only devices with the vSolution Matrix feature enabled are exposed. Exposure depends on whether untrusted hosts share the network segment with the device; where network access is already tightly restricted, the risk is lower. Teams that do not use vSolution Matrix can skip it.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000627,"input_tokens":3338,"output_tokens":586,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-70379':13A,16A 'access':105C 'affect':66C,113C 'allow':93C 'authent':45B 'avail':73C 'captur':56B,100C 'content':8A,37B,58B,72C,102C 'current':35B,70C 'cve':11A,14A 'devic':33B,67C,114C 'display':20B 'enabl':31B,65C,120C 'encrypt':90C 'expos':6A 'featur':29B,63C,119C 'host':47B,80C,96C 'infrastructur':17B 'make':69C 'matrix':2A,24B,28B,62C,118C 'may':68C,92C 'network':10A,51B,84C,104C 'otherwis':108C 'present':19B,57B,101C 'presentation-display':18B 'publish':34B 'restrict':109C 'rtsp':4A,21B 'rtsp/rtp':41B,77C 'screen':7A,36B,71C 'segment':52B,85C 'stream':5A,42B,78C,87C 'unauthent':3A,76C,95C 'unencrypt':40B 'view':54B,98C 'vsolut':1A,23B,27B,61C,117C 'vsolution-matrix':22B 'vulner':111C","nicknames":[],"mitigations":[],"who_affected":"Only devices with the vSolution Matrix feature enabled are exposed. Exposure depends on whether untrusted hosts share the network segment with the device; where network access is already tightly restricted, the risk is lower. Teams that do not use vSolution Matrix can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T18:18:39+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-70379","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70379","severity":null,"published_at":"2026-10-26T18:18:39+00:00","modified_at":"2026-10-26T18:18:39+00:00","first_seen_at":"2026-10-26T18:31:44+00:00","fetched_at":"2026-10-26T18:31:44+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}