CVE-2026-70379
Unauthorized Access to vSolution Matrix RTSP
- State
- Published
- Severity
- 7.1 High
- Published
- Oct 26, 2026
- Updated
- Oct 26, 2026
- Reserved
- Aug 4, 2026
Description
When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted. This vulnerability only affects devices with the vSolution Matrix feature enabled.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.1 High | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | ENISA |
| 3.1 | 6.5 Medium | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | ENISA |
Weaknesses
- CWE-319 Cleartext transmission of sensitive information
Affected Products
| Product | Versions |
|---|---|
Cynap Pro, Cynap Core ProWolfVision |
|
References
- https://wolfvision.com/de/security/cve-2026-70379-1vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.