Access-Control Vulnerability in WolfVision Web Server Configuration
CVE-2026-70381

6.9MEDIUM

Key Information:

Vendor

Wolfvision

Status
Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro
Cynap Pure (next Gen), Cynap Bridge
Cynap Videobar
Cynap, Cynap Core, Cynap Pure Sdm
Vendor
CVE Published:
26 October 2026

What is CVE-2026-70381?

An access-control vulnerability exists in the configuration of the WolfVision web server, potentially enabling unauthorized remote access to certain resources meant for on-device use only. Although this flaw does not allow access to credentials or administrative functions, it could expose non-public content such as screen saver images or other assets utilized by the web interface. Effective measures are necessary to mitigate the risk of unauthorized information retrieval.

Affected Version(s)

Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro 0 < 1.78a

Cynap Pure (Next Gen), Cynap Bridge 0 < 2.00d

Cynap Videobar 0 < 1.72e

References

https://wolfvision.com/de/security/cve-2026-70381-1
vendor-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

National Test Institute for Cybersecurity (NTC)
.