High · CVSS 7.1CVE-2026-70379

Unauthorized Access to vSolution Matrix RTSPCVE-2026-70379

Answer in brief

CVE-2026-70379 records a High severity (CVSS 7.1) vulnerability in Unauthorized Access to vSolution Matrix RTSP. The current sources do not mark it as known exploited. The current feed maps WolfVision/Cynap Pro, Cynap Core Pro (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Oct 26, 2026Updated Oct 26, 2026Source checked Oct 26, 2026First seen by HOL Oct 26, 2026Material review Oct 26, 2026

Upstream Advisory

Key facts

Risk: High · CVSS 7.1
Exploitation: Not marked as known exploited
Affected software: 1 mapped package or product
Fix availability: Available

Why this deserves its current priority

CVSS is 7.1. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps WolfVision/Cynap Pro, Cynap Core Pro (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
WolfVision/Cynap Pro, Cynap Core Progeneric	>=0 <1.78a	1.78a

Recommended response

Check inventory. Check lockfiles and deployed manifests for WolfVision/Cynap Pro, Cynap Core Pro.
Review the reported fix. Source-reported workaround: Until an update can be applied, consider the following measures where operationally feasible: * Disable the "vSolution Matrix" feature if it is not required. * Restrict vSolution Matrix to networks that contain only trusted Matrix stations. If network separation is not feasible, block the following on a firewall: * Inbound RTSP control: TCP 554 and 8554. The device redirects TCP 554 to 8554, and Matrix clients connect to 8554. * Outbound audio and video multicast from the device: UDP 5500-5503 by default. * On Cynap Core and on Cynap Pro, also block inbound TCP 555 and 8555 and outbound UDP 5504-5507. These ports carry the second HDMI stream. * If the multicast port base is not 5500 (see device settings), replace 5500-5503 with that base through base+3, and 5504-5507 with base+4 through base+7. WolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only.

Evidence timeline and material changes

Published upstream
Oct 26, 2026
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Oct 26, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Oct 26, 2026

Sources and claim methodology

Source referencewolfvision.com

Upstream source description

When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted. This vulnerability only affects devices with the vSolution Matrix feature enabled.

Quoted source text, attributed separately from HOL analysis.