{"id":"CVE-2026-59106","published":"2026-10-26T14:16:38.813","lastModified":"2026-10-26T16:58:40.880","description":"A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input could allow an unauthenticated attacker with network access to a vulnerable service to execute operating-system commands with the privileges of the affected application service.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://wolfvision.com/de/security/cve-2026-59106-2","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The WolfProt interface contains insufficient neutralization of user-controlled input, allowing unauthenticated remote attackers to inject and execute arbitrary operating-system commands with the application's privileges.","exploitability":"Highly exploitable by unauthenticated attackers over the network with no user interaction required.","blast_radius":"Successful exploitation could lead to full system compromise including data theft, unauthorized modification, and service disruption.","remediation":"Upgrade to WolfProt version 2.590 or later, as this is the fixed version addressing the command injection vulnerability in the interface.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","command-injection","network-exposed","no-auth"],"model":"garnet-coder","analyzedAt":"2026-10-27T08:48:06.810Z"}}