CVE-2026-59107: Shared SSH Authentication Key in vSolution Matrix File Sharing
A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the matching private key to authenticate to an affected device via SSH as root. This vulnerability affects only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Only Kindermann vSolution Matrix devices configured as a vSolution Matrix main/master station with the file sharing feature enabled are affected. Devices not using that role and feature are not identified as affected.
What must an attacker have to exploit this issue?
An attacker must obtain the private key that matches the shared cryptographic trust configuration. With that key, they could authenticate to an affected device over SSH as root.
Does exploitation require an existing account or user interaction?
No existing account or user interaction is indicated. The supplied severity vector lists network attack access, low attack complexity, no privileges required, and no user interaction.