CVE-2026-70382
Stored Cross-Site Scripting in Web Interface
CVSS Score
4.1
EPSS Score
0.0%
EPSS Percentile
0th
Some externally supplied values stored by the device may be rendered in the web interface without sufficient output encoding. An attacker who can influence one of these values could cause script execution in the browser of a user who views an affected page. Exploitation requires an attacker to influence a stored value and a user to view a page that renders it.
| CWE | CWE-79 |
| Vendor | wolfvision |
| Product | cynap pro, cynap core pro, cynap receiver, cynap pure, cynap pure mini, cynap pure pro |
| Published | Oct 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for wolfvision cynap pro, cynap core pro, cynap receiver, cynap pure, cynap pure mini, cynap pure pro
Be the first to know when new medium vulnerabilities affecting wolfvision cynap pro, cynap core pro, cynap receiver, cynap pure, cynap pure mini, cynap pure pro are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
None
Integrity
None
Availability
Low
Affected Versions
WolfVision / Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro
0 < 1.78a
WolfVision / Cynap Pure (Next Gen), Cynap Bridge
0 < 2.00d
WolfVision / Cynap Videobar
0 < 1.72e
WolfVision / Cynap, Cynap Core, Cynap Pure SDM
0
References
Credits
🔍 National Test Institute for Cybersecurity (NTC)