vSolution Matrix: SSH authentication bypass (CVE-2026-59107)
A shared cryptographic trust configuration in the vSolution Matrix file sharing feature allows unauthorized root access via SSH if the corresponding private key is obtained.
CVE search metadata
CVE search record: CVE-2026-59107. Severity: critical. CVSS: 9.8. KEV: no. Product: vSolution Matrix (main/master station configuration). Brief: vSolution Matrix: SSH authentication bypass (CVE-2026-59107). Brief link: https://feed.craftedsignal.io/briefs/2026-10-vsolution-matrix-auth-bypass/
Triage facts
Revision 1- Applicability
- vSolution Matrix (main/master station configuration)
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 1 public source
- Freshness
- Revision 1Oct 26, 15:45 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A security vulnerability (CVE-2026-59107) has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.