CVE-2026-59106Critical· 9.8▾ MidnightA security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute op…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.
cynap_pure_next_gen_cynap_bridge < 2.00ccynap_pro_cynap_core_pro_cynap_receiver_cynap_pure_cynap_pure_mini_cynap_pure_pro < 1.78acynap_videobar_firmware_version < 1.72ecynap_cynap_core_cynap_pure_sdm all versionsRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Until an update can be applied, restrict network access to the WolfProt-related ports (TCP 50915 and 50917) as well as the web management interfaces (TCP 80 and 443) to trusted hosts only. Note that these services cannot be disabled. WolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-59107Critical· 9.8Shared SSH Authentication Key in vSolution Matrix File Sharing
CVE-2022-33186Critical· 9.8A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric OS switch commands capable of modifying zoning, disabling …
CVE-2022-37902High· 7.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
CVE-2022-37899High· 7.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
CVE-2022-37900High· 7.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
CVE-2022-37901High· 7.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface