WolfVision WolfProt: Unauthenticated remote code execution (CVE-2026-59106)
An unauthenticated remote code execution vulnerability in the WolfProt interface due to improper input sanitization now has a public proof-of-concept exploit available.
CVE search metadata
CVE search record: CVE-2026-59106. Severity: critical. CVSS: 9.8. KEV: no. Product: WolfProt. Brief: WolfVision WolfProt: Unauthenticated remote code execution (CVE-2026-59106). Brief link: https://feed.craftedsignal.io/briefs/2026-10-wolfprot-rce/
Triage facts
Revision 1- Applicability
- WolfProt
- Evidence
- Unknown
- Severity
- Critical
- Action
- Immediate escalation
- Sources
- 3 public sources
- Freshness
- Revision 1Oct 26, 17:03 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- B3Likely
WolfVision WolfProt contains a critical vulnerability (CVE-2026-59106) in its interface implementation. The vulnerability stems from insufficient neutralization of user-controlled input, which allows an unauthenticated attacker with network access to achieve remote code execution (RCE) with the privileges of the affected application service. A public proof-of-concept exploit is currently available.
Impact
Successful exploitation allows for unauthenticated remote operating-system command execution, potentially leading to full system compromise of the affected WolfVision device.
Recommendation
- Immediately identify and inventory all WolfVision WolfProt deployments within the network environment.
- Review the official security advisory at the WolfVision website for guidance on patching or disabling the vulnerable interface.
- Restrict network access to the WolfProt management interface to trusted administrative segments until patches are applied.
- Monitor for anomalous process execution patterns originating from the WolfProt application process.
Immediate actions
Restrict network access to WolfProt interface for all external-facing or unauthorized segments.
Threat Hunt
Search for unexpected child processes spawned by the WolfProt application process.
Data: Process creation logs from the host running WolfProt
Mitigations
Apply vendor security updates or configuration workarounds as provided in the WolfVision advisory.
CVE-2026-59106