CVE-2026-59106
Last modified
CVE-2026-59106 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service..
Description
A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| WolfVision | Cynap Pure (Next Gen), Cynap Bridge | < 2.00c |
| WolfVision | Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro | < 1.78a |
| WolfVision | Cynap Videobar, Firmware Version | < 1.72e |
| WolfVision | Cynap, Cynap Core, Cynap Pure SDM | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-59106?
How severe is CVE-2026-59106?
How do I fix CVE-2026-59106?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-5910Integer overflow in Media in Google Chrome prior to 147.0.77…8.8
- CVE-2026-59100LobeChat through 2.2.9 contains a broken object level author…5
- CVE-2026-59101AutoBangumi before 3.2.8 contains a server-side request forg…5.8
- CVE-2026-59102Forgejo before 15.0.3 contains a stored cross-site scripting…5.4
- CVE-2026-59104UgCS server before 6.2 contains an authentication bypass in …9.8
- CVE-2026-59105Jumis (formerly Tildes Jumis) creates and uses a Microsoft S…9.8
- CVE-2026-59107A security vulnerability has been identified in the vSolutio…9.8
- CVE-2026-59109SQL injection in the Zalktis accounting application via trad…8.8
- CVE-2026-5911Policy bypass in ServiceWorkers in Google Chrome prior to 14…4.3
- CVE-2026-59111Improper neutralization of special elements used in an OS co…9.3
- CVE-2026-59112Improper verification of cryptographic signature and Imprope…4.4
- CVE-2026-59113Missing authorization in Visual Studio Code allows an unauth…8.8
Are you affected by CVE-2026-59106?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST