CVE-2026-70381
Unauthorized Access to Internal Web Resources
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface. The accessible resources do not expose credentials or provide administrative functionality, but may include non-public device content, such as screen-saver content or assets used by the web interface.
| CWE | CWE-290 |
| Vendor | wolfvision |
| Product | cynap pro, cynap core pro, cynap receiver, cynap pure, cynap pure mini, cynap pure pro |
| Published | Oct 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for wolfvision cynap pro, cynap core pro, cynap receiver, cynap pure, cynap pure mini, cynap pure pro
Be the first to know when new medium vulnerabilities affecting wolfvision cynap pro, cynap core pro, cynap receiver, cynap pure, cynap pure mini, cynap pure pro are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
WolfVision / Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro
0 < 1.78a
WolfVision / Cynap Pure (Next Gen), Cynap Bridge
0 < 2.00d
WolfVision / Cynap Videobar
0 < 1.72e
WolfVision / Cynap, Cynap Core, Cynap Pure SDM
0
References
Credits
🔍 National Test Institute for Cybersecurity (NTC)