---
id: CVE-2026-59107
title: Shared SSH Authentication Key in vSolution Matrix File Sharing
summary: >-
  A security vulnerability has been identified in the vSolution Matrix file
  sharing feature. A shared cryptographic trust configuration could allow an
  attacker who obtains the matching private key to authenticate to an affected
  device via …
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-797
vendor: WolfVision
product: 'Cynap Pro, Cynap Core Pro'
affected:
  - cynap_pro_cynap_core_pro < 1.78a
  - cynap_cynap_core all versions
published: '2026-10-26'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T13:33:12.851Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-59107'
references:
  - url: 'https://wolfvision.com/de/security/cve-2026-59107-1'
tags:
  - cve.org
ingestedAt: '2026-10-26T14:27:31.819Z'
---

## Overview

A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.

## Affected

- `cynap_pro_cynap_core_pro < 1.78a`
- `cynap_cynap_core all versions`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Until an update can be applied, take the following measures where operationally feasible:
  *  Disable vSolution Matrix file sharing if the feature is not required.
  *  Restrict access to the vSolution Matrix file sharing service on TCP port 50930 to trusted hosts only.


WolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only.