Unauthenticated Stream Exposure in WolfVision Devices with vSolution Matrix Feature
CVE-2026-70379

7.1HIGH

Key Information:

Vendor

Wolfvision

Status
Cynap Pro, Cynap Core Pro
Vendor
CVE Published:
26 October 2026

What is CVE-2026-70379?

The vSolution Matrix feature in specific WolfVision devices poses a security risk by allowing the current screen content to be accessed through an unauthenticated RTSP/RTP stream. This occurs when the feature is enabled, potentially exposing sensitive presentation content to any host on the same network segment. The lack of encryption further increases the risk, as unauthorized users could view or capture this information without needing any credentials. This vulnerability affects only those devices that have the vSolution Matrix feature activated.

Affected Version(s)

Cynap Pro, Cynap Core Pro 0 < 1.78a

References

https://wolfvision.com/de/security/cve-2026-70379-1
vendor-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

National Test Institute for Cybersecurity (NTC)
.