{"id":"CVE-2026-59107","title":"Shared SSH Authentication Key in vSolution Matrix File Sharing","summary":"A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via …","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-797"],"vendor":"WolfVision","product":"Cynap Pro, Cynap Core Pro","affected":["cynap_pro_cynap_core_pro < 1.78a","cynap_cynap_core all versions"],"published":"2026-10-26","updated":"2026-10-26","sourceUpdated":"2026-10-26T13:33:12.851Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-59107","references":[{"url":"https://wolfvision.com/de/security/cve-2026-59107-1"}],"tags":["cve.org"],"ingestedAt":"2026-10-26T14:27:31.819Z","slug":"CVE-2026-59107","body":"## Overview\n\nA security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.\n\n## Affected\n\n- `cynap_pro_cynap_core_pro < 1.78a`\n- `cynap_cynap_core all versions`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nUntil an update can be applied, take the following measures where operationally feasible:\n  *  Disable vSolution Matrix file sharing if the feature is not required.\n  *  Restrict access to the vSolution Matrix file sharing service on TCP port 50930 to trusted hosts only.\n\n\nWolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only.","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}