All vulnerabilities
CVE-2026-70380

Resource Exhaustion in MICE Service

WolfVision Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro
CVSS
6.9Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in1.78aAlso 2.00d, 1.72eCVE List
Published26 Oct 2026Updated 26 Oct 2026CVE List

What fixes it

  • 1.78aCynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure ProCVE List
  • 2.00dCynap Pure (Next Gen)CVE List
  • 1.72eCynap VideobarCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legitimate users from establishing MICE-based Miracast connections while the condition persists. Miracast P2P is not affected. MICE is disabled in the default configuration and must be explicitly enabled by the customer. On most devices, Miracast P2P is available independently of MICE, but a complete disruption of Miracast can occur on some devices when WLAN is configured for Infrastructure mode.

Text from CVE List

Affected versions 4

  • Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Proaffected: all versions before 1.78aCVE List
  • Cynap Pure (Next Gen)affected: all versions before 2.00dCVE List
  • Cynap Videobaraffected: all versions before 1.72eCVE List
  • Cynap, Cynap Core, Cynap Pure SDMaffected: version unspecifiedCVE List

References 1