CVE-2026-59107
Last modified
CVE-2026-59107 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| WolfVision | Cynap Pro, Cynap Core Pro | < 1.78a |
| WolfVision | Cynap, Cynap Core | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-59107?
How severe is CVE-2026-59107?
How do I fix CVE-2026-59107?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-59100LobeChat through 2.2.9 contains a broken object level author…5
- CVE-2026-59101AutoBangumi before 3.2.8 contains a server-side request forg…5.8
- CVE-2026-59102Forgejo before 15.0.3 contains a stored cross-site scripting…5.4
- CVE-2026-59104UgCS server before 6.2 contains an authentication bypass in …9.8
- CVE-2026-59105Jumis (formerly Tildes Jumis) creates and uses a Microsoft S…9.8
- CVE-2026-59106A security vulnerability has been identified in the WolfProt…9.8
- CVE-2026-59109SQL injection in the Zalktis accounting application via trad…8.8
- CVE-2026-5911Policy bypass in ServiceWorkers in Google Chrome prior to 14…4.3
- CVE-2026-59111Improper neutralization of special elements used in an OS co…9.3
- CVE-2026-59112Improper verification of cryptographic signature and Imprope…4.4
- CVE-2026-59113Missing authorization in Visual Studio Code allows an unauth…8.8
- CVE-2026-59115'.../...//' in Microsoft Entra Provisioning Service (SyncFab…9.9
Are you affected by CVE-2026-59107?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
