Vulnerability · Published Oct 26, 2026 · Assigned by ENISA

CVE-2026-59107Shared SSH Authentication Key in vSolution Matrix File Sharing

Critical 9.8

In plain English

A critical-severity security flaw in Cynap, Cynap Core from WolfVision. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.4%top 70.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.

Affected products (as reported)

Vendor	Product	Versions
WolfVision	Cynap Pro, Cynap Core Pro	0 – before 1.78a
WolfVision	Cynap, Cynap Core	0

Weakness: CWE-797 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://wolfvision.com/de/security/cve-2026-59107-1 vendor-advisory