WolfVision has 6 CVEs on record. Disclosure cadence is accelerating: 6 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 6. The median CVSS is 5.9 (medium), with 2 rated critical. None have a confirmed exploitation report. Most affected products: Cynap Pro, Cynap Core Pro (2), Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro (2), Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.9
- Publish → KEV
- —
- Last 90 days
- 6 prev 0
Products
- Cynap Pro, Cynap Core Pro 2
- Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro 2
- Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro 1
- Cynap Pure (Next Gen), Cynap Bridge 1
Worst active — by depth score
CVE-2026-59107Critical· 9.8Shared SSH Authentication Key in vSolution Matrix File Sharing54CVE-2026-59106Critical· 9.8Unauthenticated RCE Vulnerability in WolfProt interface implementation54CVE-2026-70379Medium· 6.5Unauthorized Access to vSolution Matrix RTSP36CVE-2026-70381Medium· 5.3Unauthorized Access to Internal Web Resources29CVE-2026-70380Medium· 5.3Resource Exhaustion in MICE Service29
WolfVision vulnerabilities
CVEs affecting WolfVision, newest first. Open any entry for full detail, references, and exploit status.
6 CVEsRSS
CVE-2026-70380Medium· 5.3Resource Exhaustion in MICE Service
A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacker with network access to the MICE service could consume available connection cap…
CVE-2026-70381Medium· 5.3Unauthorized Access to Internal Web Resources
An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface. The a…
CVE-2026-70382Medium· 4.1Stored Cross-Site Scripting in Web Interface
Some externally supplied values stored by the device may be rendered in the web interface without sufficient output encoding. An attacker who can influence one of these values could cause script execution in the browser of a user who vie…
CVE-2026-70379Medium· 6.5Unauthorized Access to vSolution Matrix RTSP
When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an una…
CVE-2026-59106Critical· 9.8Unauthenticated RCE Vulnerability in WolfProt interface implementation
A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute op…
CVE-2026-59107Critical· 9.8Shared SSH Authentication Key in vSolution Matrix File Sharing
A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via …