CVE-2026-75969

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials. This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects: * Move 4K 12X before: 0.0.98 * Move 4K 20X before: 0.1.33 * Move 4K 30X before: 2.1.17 * Link 4K 12X before: 0.0.99 * Link 4K 20X before: 0.1.37 * Link 4K 30X before: 2.1.18 * Move SE 12X before: 9.1.66 * Move SE 20X before: 9.1.44 * Move SE 30X before: 9.1.46 * Studio 4K 12X before: 8.3.32 * Studio 4K 20X before: 8.3.32 * Studio SE 12X before: 8.3.32 * Studio SE 20X before: 8.3.32 * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions * Upgrade Tool - All versions

CVSS

No CVSS.

References

Link	Resource
https://psirt.havsys.com/

Configurations

No configuration.

History

30 Sep 2026, 17:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-09-30 17:16

Updated : 2026-09-30 21:17

NVD link : CVE-2026-75969

Mitre link : CVE-2026-75969

CVE.ORG link : CVE-2026-75969

JSON object : View

Products Affected

No product.

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2026-75969", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-75969", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-09-30T18:30:11.739848Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "16cac6a8-cc1e-4741-89aa-6b97e2437706", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "USER", "baseScore": 9.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "CONCENTRATED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:C/RE:L/U:Red", "exploitMaturity": "UNREPORTED", "providerUrgency": "RED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "LOW", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "16cac6a8-cc1e-4741-89aa-6b97e2437706", "affectedData": [{"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "Move 4K 12X", "versions": [{"status": "affected", "version": "0", "lessThan": "0.0.98", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "Move 4K 20X", "versions": [{"status": "affected", "version": "0", "lessThan": "0.1.33", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "Move 4K 30X", "versions": [{"status": "affected", "version": "0", "lessThan": "2.1.17", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "Link 4K 12X", "versions": [{"status": "affected", "version": "0", "lessThan": "0.0.99", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "Link 4K 20X", "versions": [{"status": "affected", "version": "0", "lessThan": "0.1.37", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "Link 4K 30X", "versions": [{"status": "affected", "version": "0", "lessThan": "2.1.18", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "Move SE 12X", "versions": [{"status": "affected", "version": "0", "lessThan": "9.1.66", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "Move SE 20X", "versions": [{"status": "affected", "version": "0", "lessThan": "9.1.44", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "Move SE 30X", "versions": [{"status": "affected", "version": "0", "lessThan": "9.1.46", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "Studio 4K 12X", "versions": [{"status": "affected", "version": "0", "lessThan": "8.3.32", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "Studio 4K 20X", "versions": [{"status": "affected", "version": "0", "lessThan": "8.3.32", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "Studio SE 12X", "versions": [{"status": "affected", "version": "0", "lessThan": "8.3.32", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "Studio SE 20X", "versions": [{"status": "affected", "version": "0", "lessThan": "8.3.32", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "PT12X-USB-GY-G2, PT12X-USB-WH-G2", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "PT20X-USB-GY-G2, PT20X-USB-WH-G2", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "PTVL-ZCAM, PTVL-NDI-ZCAM", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "PT12X-ZCAM, PT12X-NDI-ZCAM", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "PT20X-ZCAM, PT20X-NDI-ZCAM", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "PTZOptics", "product": "Studio Pro", "versions": [{"status": "affected", "version": "0"}], "defaultStatus": "affected"}, {"vendor": "PTZOptics", "modules": ["Firmware Update"], "product": "Upgrade Tool", "versions": [{"status": "affected", "version": "0", "versionType": "custom"}], "defaultStatus": "affected"}]}], "published": "2026-09-30T17:16:49.583", "references": [{"url": "https://psirt.havsys.com/", "source": "16cac6a8-cc1e-4741-89aa-6b97e2437706"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "16cac6a8-cc1e-4741-89aa-6b97e2437706", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.\n\n\n\nThis vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:\n\n\n\n\n\n * Move 4K 12X before: 0.0.98\n * Move 4K 20X before: 0.1.33\n * Move 4K 30X before: 2.1.17\n * Link 4K 12X before: 0.0.99\n * Link 4K 20X before: 0.1.37\n * Link 4K 30X before: 2.1.18\n * Move SE 12X before: 9.1.66\n * Move SE 20X before: 9.1.44\n * Move SE 30X before: 9.1.46\n * Studio 4K 12X before: 8.3.32\n * Studio 4K 20X before: 8.3.32\n * Studio SE 12X before: 8.3.32\n * Studio SE 20X before: 8.3.32\n * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions\n * Upgrade Tool - All versions"}], "lastModified": "2026-09-30T21:17:13.377", "sourceIdentifier": "16cac6a8-cc1e-4741-89aa-6b97e2437706"}