Critical · CVSS 9.2CVE-2026-59107

Shared SSH Authentication Key in vSolution Matrix File SharingCVE-2026-59107

Answer in brief

CVE-2026-59107 records a Critical severity (CVSS 9.2) vulnerability in Shared SSH Authentication Key in vSolution Matrix File Sharing. The current sources do not mark it as known exploited. The current feed maps WolfVision/Cynap, Cynap Core (generic), WolfVision/Cynap Pro, Cynap Core Pro (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Oct 26, 2026Updated Oct 26, 2026Source checked Oct 26, 2026First seen by HOL Oct 26, 2026Material review Oct 26, 2026

Upstream Advisory

Key facts

Risk: Critical · CVSS 9.2
Exploitation: Not marked as known exploited
Affected software: 2 mapped packages or products
Fix availability: Available

Why this deserves its current priority

CVSS is 9.2. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps WolfVision/Cynap, Cynap Core (generic), WolfVision/Cynap Pro, Cynap Core Pro (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
WolfVision/Cynap, Cynap Coregeneric	*	Not reported
WolfVision/Cynap Pro, Cynap Core Progeneric	>=0 <1.78a	1.78a

Recommended response

Check inventory. Check lockfiles and deployed manifests for WolfVision/Cynap, Cynap Core, WolfVision/Cynap Pro, Cynap Core Pro.
Review the reported fix. Source-reported workaround: Until an update can be applied, take the following measures where operationally feasible: * Disable vSolution Matrix file sharing if the feature is not required. * Restrict access to the vSolution Matrix file sharing service on TCP port 50930 to trusted hosts only. WolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only.

Evidence timeline and material changes

Published upstream
Oct 26, 2026
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Oct 26, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Oct 26, 2026

Sources and claim methodology

Source referencewolfvision.com

Upstream source description

A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.

Quoted source text, attributed separately from HOL analysis.