{"schema":"threatline.record/2","record":{"id":"CVE-2026-59107","aliases":[],"summary":"Shared SSH Authentication Key in vSolution Matrix File Sharing","details":"A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.","categories":["Unclassified"],"product":"Cynap Pro, Cynap Core Pro","vendor":"WolfVision","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-59107","source_modified_at":"2026-10-26T13:33:12.851Z","fetched_at":"2026-10-26T19:10:57.178988Z","product":"Cynap Pro, Cynap Core Pro","vendor":"WolfVision","versions":[{"status":"affected","version":"0","lessThan":"1.78a","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-59107","source_modified_at":"2026-10-26T13:33:12.851Z","fetched_at":"2026-10-26T19:10:57.178988Z","product":"Cynap, Cynap Core","vendor":"WolfVision","versions":[{"status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-59107","source_modified_at":"2026-10-26T13:33:12.851Z","fetched_at":"2026-10-26T19:10:57.178988Z","package":{"name":"Cynap Pro, Cynap Core Pro","ecosystem":null},"version":"1.78a","basis":"first unaffected version stated in the CVE record"}],"cvss":9.2,"severity":"Critical","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-26T13:33:12.851Z","modified_at":"2026-10-26T13:33:12.851Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-59107","fetched_at":"2026-10-26T19:10:57.178988Z","source_modified_at":"2026-10-26T13:33:12.851Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://wolfvision.com/de/security/cve-2026-59107-1","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-26T13:33:12.851Z","content_hash":"2b4b2bc1a23f52ddfe1c151fb178ca9e40bd47b127ebc37e91c5d08b99fefebf"}}
