Script Execution Vulnerability in WolfVision Devices
CVE-2026-70382

5.1MEDIUM

Key Information:

Vendor

Wolfvision

Status
Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro
Cynap Pure (next Gen), Cynap Bridge
Cynap Videobar
Cynap, Cynap Core, Cynap Pure Sdm
Vendor
CVE Published:
26 October 2026

What is CVE-2026-70382?

A vulnerability exists in certain WolfVision devices where externally supplied values are rendered in the web interface without appropriate output encoding. This lack of proper handling could enable an attacker to influence these values, potentially leading to script execution in a user's browser when they access an affected webpage. To mitigate such risks, it is crucial for users to ensure that their devices are updated and to follow best practices in web security.

Affected Version(s)

Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro 0 < 1.78a

Cynap Pure (Next Gen), Cynap Bridge 0 < 2.00d

Cynap Videobar 0 < 1.72e

References

https://wolfvision.com/de/security/cve-2026-70382-1
vendor-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

National Test Institute for Cybersecurity (NTC)
.