Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
⚠️ CVE-2026-59106 (9.8) ⚠️ WolfProt lets an unauthenticated attacker with network access run operating-system commands on the server. No affected versions or fixed release are named yet, so restrict who can reach it. https://t.co/nZxQ3YCuax
🚨 WolfVision Cynap: unauthenticated RCE via the WolfProt control protocol (CVE-2026-59106) ⚠️ CVSS 3.1 9.8 / 4.0 9.3 (CNA). OS command injection, no login needed 🔌 Reachable on TCP 50915, 50917, 80 and 443 🛡️ Update: Pure (Next Gen)/Bridge v2.00c, Pro/Core Pro/Receiver/Pure v1.78a, Videobar v1.72e ⛔ Cynap, Cynap Core, Pure SDM: discontinued, no fix. Restrict to trusted hosts ✅ Not exploited per vendor 🔗 https://wolfvision.com/de/security/cve-2026-59106-2 #CyberSecurity #CVE #RCE