{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/wolfvision/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:wolfvision:wolfprot:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-59106"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["WolfProt"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["WolfVision"],"content_html":"\u003cp\u003eWolfVision WolfProt contains a critical vulnerability (CVE-2026-59106) in its interface implementation. The vulnerability stems from insufficient neutralization of user-controlled input, which allows an unauthenticated attacker with network access to achieve remote code execution (RCE) with the privileges of the affected application service. A public proof-of-concept exploit is currently available.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for unauthenticated remote operating-system command execution, potentially leading to full system compromise of the affected WolfVision device.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately identify and inventory all WolfVision WolfProt deployments within the network environment.\u003c/li\u003e\n\u003cli\u003eReview the official security advisory at the WolfVision website for guidance on patching or disabling the vulnerable interface.\u003c/li\u003e\n\u003cli\u003eRestrict network access to the WolfProt management interface to trusted administrative segments until patches are applied.\u003c/li\u003e\n\u003cli\u003eMonitor for anomalous process execution patterns originating from the WolfProt application process.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-26T17:03:16Z","date_published":"2026-10-26T17:03:16Z","id":"https://feed.craftedsignal.io/briefs/2026-10-wolfprot-rce/","summary":"An unauthenticated remote code execution vulnerability in the WolfProt interface due to improper input sanitization now has a public proof-of-concept exploit available.","title":"WolfVision WolfProt: Unauthenticated remote code execution (CVE-2026-59106)","url":"https://feed.craftedsignal.io/briefs/2026-10-wolfprot-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - WolfVision","version":"https://jsonfeed.org/version/1.1"}