CVE-2026-70379
Deferred Deferred - Pending Action

Unauthenticated RTSP Stream Exposure in vSolution Matrix

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: ENISA

Description
When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is not otherwise restricted. This vulnerability only affects devices with the vSolution Matrix feature enabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-70379
EUVD
EUVD-2026-110052

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
WolfVision Cynap Pro, Cynap Core Pro 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-319 The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows unauthenticated access to an unencrypted RTSP/RTP stream of the current screen content on affected devices when the vSolution Matrix feature is enabled. The stream is accessible to any host on the same network segment, potentially exposing sensitive presentation content.

Detection Guidance

Check if the vSolution Matrix feature is enabled on affected devices. Use network scanning tools to detect unauthenticated RTSP/RTP streams on the same network segment. Commands like nmap or Wireshark can help identify open RTSP ports (default 554) and unencrypted streams.

Impact Analysis

An attacker on the same network could view or capture live screen content without authentication, leading to exposure of confidential or sensitive information displayed during presentations. This could include proprietary data, personal information, or other restricted content.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. Organizations may face compliance breaches if such data is exposed through the unauthenticated stream.

Mitigation Strategies

Disable the vSolution Matrix feature if not required. Restrict network access to RTSP/RTP ports using firewalls. Ensure all network traffic is encrypted. Monitor network traffic for unauthorized streams.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-70379. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart