All vulnerabilities
CVE-2026-59106

Cynap Pure (Next Gen), Cynap Bridge: Unauthenticated RCE Vulnerability in WolfProt interface implementation

WolfVision Cynap Pure (Next Gen), Cynap BridgeFrameworks
Open in ThreatlineRecord JSON
CVSS
9.3Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in2.00cAlso 1.78a, 1.72eCVE List
Published26 Oct 2026Updated 26 Oct 2026CVE List

What fixes it

  • 2.00cCynap Pure (Next Gen), Cynap BridgeCVE List
  • 1.78aCynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure ProCVE List
  • 1.72eCynap Videobar, Firmware VersionCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.

Text from CVE List

Affected versions 4

  • Cynap Pure (Next Gen), Cynap Bridgeaffected: all versions before 2.00cCVE List
  • Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Proaffected: all versions before 1.78aCVE List
  • Cynap Videobar, Firmware Versionaffected: all versions before 1.72eCVE List
  • Cynap, Cynap Core, Cynap Pure SDMaffected: version unspecifiedCVE List

References 1