WolfVision Cynap Pro EUVD-2026-110052

Exploitation requires the vSolution Matrix feature to be explicitly enabled - the advisory states the vulnerability only affects devices with this feature active, so it does not apply to default/feature-disabled deployments. The attacker must have network access to the same network segment as the device (CVSS AV:A), meaning an existing LAN foothold or physical/wireless access to that segment. Impact is further limited to devices running versions below 1.78a, and to confidentiality only (capturing displayed presentation content); there is no path to integrity or availability impact. The practical limiting factors are therefore: the non-default Matrix feature requirement, adjacency to the network segment, and any network segmentation/access restrictions already in place around the device.

This is a genuine but bounded confidentiality exposure, not a top-tier emergency. The CVSS 4.0 vector (AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N, score 7.1) is internally consistent with the description: adjacent-network reach (same network segment), low complexity, no authentication, no user interaction, and high confidentiality impact with zero integrity or availability impact (matching CWE-319 cleartext transmission). No EPSS score was provided, so exploitation probability cannot be quantified. The vulnerability is NOT in CISA KEV and no exploit reference is present, so there is no public exploit identified at time of analysis. The vuln.today decision label is 'this_week' - a prompt-patch priority rather than act_now/emergency - which aligns with the moderate score and the confidentiality-only impact. The key signal that tempers real-world risk is that exploitation is confined to the adjacent network segment (AV:A, not AV:N): an attacker must already be on the same LAN/segment as the device, so this is not internet-wide exploitable. The impact is limited to viewing/capturing presentation screen content, with no code execution or device compromise.

An attacker who has gained a foothold on the same network segment as a WolfVision Cynap Pro/Cynap Core Pro device with vSolution Matrix enabled connects to the unauthenticated, unencrypted RTSP/RTP stream and silently captures whatever is currently displayed - for example confidential slides, documents, or video shown during a meeting. No credentials or user interaction are needed. No public exploit code is identified, but standard RTSP/RTP clients can consume such a stream without specialized tooling.