Shared SSH Authentication Key in vSolution Matrix File Sharing

{
  "id": "7d2bf7316426caef451311efbba8856a218041e66299bc54dc1f0fef77c6e011",
  "url": "https://www.cve.org/CVERecord?id=CVE-2026-59107",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Shared SSH Authentication Key in vSolution Matrix File Sharing",
    "summary": "A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.",
    "evidence": "cve:CVE-2026-59107",
    "products": [
      {
        "name": {
          "value": "Cynap Pro, Cynap Core Pro",
          "evidence": "/containers/cna/affected/0/product"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      },
      {
        "name": {
          "value": "Cynap, Cynap Core",
          "evidence": "/containers/cna/affected/1/product"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "critical",
    "structured": {
      "id": "CVE-2026-59107",
      "aliases": [
        "CVE-2026-59107"
      ],
      "metrics": [
        {
          "format": "CVSS",
          "cvssV4_0": {
            "Safety": "NOT_DEFINED",
            "version": "4.0",
            "Recovery": "NOT_DEFINED",
            "baseScore": 9.2,
            "Automatable": "NOT_DEFINED",
            "attackVector": "NETWORK",
            "baseSeverity": "CRITICAL",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "exploitMaturity": "NOT_DEFINED",
            "providerUrgency": "NOT_DEFINED",
            "userInteraction": "NONE",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "privilegesRequired": "NONE",
            "subIntegrityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "subAvailabilityImpact": "NONE",
            "vulnAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "format": "CVSS",
          "cvssV3_1": {
            "scope": "UNCHANGED",
            "version": "3.1",
            "baseScore": 9.8,
            "attackVector": "NETWORK",
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "integrityImpact": "HIGH",
            "userInteraction": "NONE",
            "attackComplexity": "LOW",
            "availabilityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "confidentialityImpact": "HIGH"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "affected": [
        {
          "vendor": "WolfVision",
          "product": "Cynap Pro, Cynap Core Pro",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "1.78a",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "WolfVision",
          "product": "Cynap, Cynap Core",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "affected"
        }
      ],
      "modified": "2026-10-26T13:33:12.851Z",
      "provider": "cve",
      "references": [
        "https://wolfvision.com/de/security/cve-2026-59107-1"
      ],
      "provider_metadata": {
        "cna": {
          "orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
          "shortName": "ENISA",
          "dateUpdated": "2026-10-26T13:33:12.851Z"
        }
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-59107",
        "evidence": "/cveMetadata/cveId"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/containers/cna/metrics"
  },
  "source_id": "core-cve",
  "document_id": 307270,
  "published_at": "2026-10-26T13:33:12.851+00:00"
}