CVE-2026-59107

CriticalCVSS 9.8/10Last modified Nov 2, 2026

Description

A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-797

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
WolfVision	Cynap Pro, Cynap Core Pro	< 1.78a
WolfVision	Cynap, Cynap Core	0

References

https://wolfvision.com/de/security/cve-2026-59107-1

Timeline

Published: Oct 26, 2026
Last modified: Nov 2, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-591098.8SQL injection in the Zalktis accounting application via trading-partner-controlled text fields in received electronic invoices. When importi CVE-2026-59114.3Policy bypass in ServiceWorkers in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass content security policy via a cr CVE-2026-591119.3Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Digitální a informační agentura CVE-2026-591124.4Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Informat CVE-2026-591138.8Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.CVE-2026-591159.9'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.CVE-2026-591166.8Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over CVE-2026-591177.5Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.CVE-2026-591189.3Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.CVE-2026-591197.3Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.CVE-2026-59128.8Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a CVE-2026-591227.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorize