CVE-2026-59107
Awaiting Analysis Awaiting Analysis - Queue

vSolution Matrix SSH Root Authentication Bypass

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: ENISA

Description
A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-59107
EUVD
EUVD-2026-109828

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
WolfVision Cynap Pro, Cynap Core Pro 0
WolfVision Cynap, Cynap Core 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-797 The product receives data from an upstream component, but only accounts for special elements at an absolute position (e.g. "byte number 10"), thereby missing remaining special elements that may exist before sending it to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an attacker with access to a matching private key to authenticate via SSH as root on devices configured as vSolution Matrix main stations with file sharing enabled. It stems from a shared cryptographic trust configuration in the file sharing feature.

Detection Guidance

Check if your device is configured as a vSolution Matrix main/master station with file sharing enabled. Verify SSH access using default root credentials or known private keys. Inspect network traffic for unauthorized SSH connections to the device.

Impact Analysis

An attacker could gain full root access to affected devices, potentially leading to data theft, unauthorized modifications, or disruption of services. Only devices with file sharing enabled as main stations are at risk.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Organizations using affected devices may face compliance breaches and legal penalties.

Mitigation Strategies

Disable the file sharing feature on vSolution Matrix main/master stations. Rotate all SSH private keys associated with the device. Restrict SSH access to trusted networks only. Update to the latest firmware if a patch is available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59107. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart