CVE-2026-70379Medium· 6.5▾ Sunlit

Unauthorized Access to vSolution Matrix RTSP

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score36/ 100 · Low

impact 35.8 · likelihood 0 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Oct 26, 2026

Updated

Oct 26, 2026

CVSS

6.5

Vendor

WolfVision

Product

Cynap Pro, Cynap Core Pro

CWE

CWE-319

Depth score

36 · Low

EPSS

0.11% · p1

Platforms

—

Source

CVEORG

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS history

Exploit-prediction probability, daily snapshots since Oct 27.

0.1% → 0.1%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

2 events · 1 day

Oct 26, 2026Published
Disclosed via CVEORG
Oct 27, 2026EPSS first tracked
0.1%

WolfVision CWE-319 #cve.org

Affected

cynap_pro_cynap_core_pro < 1.78a

Full technical detail▾

Overview

When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted. This vulnerability only affects devices with the vSolution Matrix feature enabled.

Affected

cynap_pro_cynap_core_pro < 1.78a

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

Workarounds

Until an update can be applied, consider the following measures where operationally feasible:

Disable the "vSolution Matrix" feature if it is not required.
Restrict vSolution Matrix to networks that contain only trusted Matrix stations.

If network separation is not feasible, block the following on a firewall: * Inbound RTSP control: TCP 554 and 8554. The device redirects TCP 554 to 8554, and Matrix clients connect to 8554.

Outbound audio and video multicast from the device: UDP 5500-5503 by default.
On Cynap Core and on Cynap Pro, also block inbound TCP 555 and 8555 and outbound UDP 5504-5507. These ports carry the second HDMI stream.
If the multicast port base is not 5500 (see device settings), replace 5500-5503 with that base through base+3, and 5504-5507 with base+4 through base+7.

WolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only.

References

https://wolfvision.com/de/security/cve-2026-70379-1

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#cve.org

Unauthorized Access to vSolution Matrix RTSP

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score36/ 100 · Low

impact 35.8 · likelihood 0 · exploitation 0

Overview

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

Workarounds

Until an update can be applied, consider the following measures where operationally feasible:

Disable the "vSolution Matrix" feature if it is not required.

Restrict vSolution Matrix to networks that contain only trusted Matrix stations.

If network separation is not feasible, block the following on a firewall: * Inbound RTSP control: TCP 554 and 8554. The device redirects TCP 554 to 8554, and Matrix clients connect to 8554.

Outbound audio and video multicast from the device: UDP 5500-5503 by default.

On Cynap Core and on Cynap Pro, also block inbound TCP 555 and 8555 and outbound UDP 5504-5507. These ports carry the second HDMI stream.

If the multicast port base is not 5500 (see device settings), replace 5500-5503 with that base through base+3, and 5504-5507 with base+4 through base+7.

WolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only.