CVE-2026-75969
Status: DeferredCritical (9.1)—
Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.
This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:
Technical details traces, logs and code from the original report
* Move 4K 12X before: 0.0.98 * Move 4K 20X before: 0.1.33 * Move 4K 30X before: 2.1.17 * Link 4K 12X before: 0.0.99 * Link 4K 20X before: 0.1.37 * Link 4K 30X before: 2.1.18 * Move SE 12X before: 9.1.66 * Move SE 20X before: 9.1.44 * Move SE 30X before: 9.1.46 * Studio 4K 12X before: 8.3.32 * Studio 4K 20X before: 8.3.32 * Studio SE 12X before: 8.3.32 * Studio SE 20X before: 8.3.32 * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions * Upgrade Tool - All versions
CVSS
- Version: 4.0
- Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:C/RE:L/U:Red
- Base score: 9.1
Exploitation probability (EPSS)
FIRST hasn't scored this CVE yet (usual for very recent or rejected CVEs).
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (39)
⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.
Ptzoptics — Link 4K 12XAIPtzoptics — Link 4K 20XAIPtzoptics — Link 4K 30XAIPtzoptics — Move 4K 12XAIPtzoptics — Move 4K 20XAIPtzoptics — Move 4K 30XAIPtzoptics — Move SE 12XAIPtzoptics — Move SE 20XAIPtzoptics — Move SE 30XAIPtzoptics — Pt12x NDI GY G2AIPtzoptics — Pt12x NDI WH G2AIPtzoptics — Pt12x NDI ZcamAIPtzoptics — Pt12x SDI GY G2AIPtzoptics — Pt12x SDI WH G2AIPtzoptics — Pt12x USB GY G2AIPtzoptics — Pt12x USB WH G2AIPtzoptics — Pt12x ZcamAIPtzoptics — Pt20x NDI GY G2AIPtzoptics — Pt20x NDI WH G2AIPtzoptics — Pt20x NDI ZcamAIPtzoptics — Pt20x SDI GY G2AIPtzoptics — Pt20x SDI WH G2AIPtzoptics — Pt20x USB GY G2AIPtzoptics — Pt20x USB WH G2AIPtzoptics — Pt20x ZcamAIPtzoptics — Pt30x NDI GY G2AIPtzoptics — Pt30x NDI WH G2AIPtzoptics — Pt30x SDI GY G2AIPtzoptics — Pt30x SDI WH G2AIPtzoptics — Pteptz NDI Zcam G2AIPtzoptics — Pteptz Zcam G2AIPtzoptics — Ptvl NDI ZcamAIPtzoptics — Ptvl ZcamAIPtzoptics — Studio 4K 12XAIPtzoptics — Studio 4K 20XAIPtzoptics — Studio PROAIPtzoptics — Studio SE 12XAIPtzoptics — Studio SE 20XAIPtzoptics — Upgrade ToolAI
CWEs
- CWE-306
References
Raw JSON (NVD)
Show
{
"id": "CVE-2026-75969",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-75969",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2026-09-30T18:30:11.739848Z"
}
}
],
"cvssMetricV40": [
{
"type": "Secondary",
"source": "16cac6a8-cc1e-4741-89aa-6b97e2437706",
"cvssData": {
"Safety": "NOT_DEFINED",
"version": "4.0",
"Recovery": "USER",
"baseScore": 9.1,
"Automatable": "NOT_DEFINED",
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"valueDensity": "CONCENTRATED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:C/RE:L/U:Red",
"exploitMaturity": "UNREPORTED",
"providerUrgency": "RED",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"subIntegrityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"availabilityRequirement": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"subConfidentialityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"confidentialityRequirement": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"vulnerabilityResponseEffort": "LOW",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED"
}
}
]
},
"affected": [
{
"source": "16cac6a8-cc1e-4741-89aa-6b97e2437706",
"affectedData": [
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move 4K 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.0.98",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move 4K 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.1.33",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move 4K 30X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.1.17",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Link 4K 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.0.99",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Link 4K 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.1.37",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Link 4K 30X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.1.18",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move SE 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "9.1.66",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move SE 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "9.1.44",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move SE 30X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "9.1.46",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Studio 4K 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "8.3.32",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Studio 4K 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "8.3.32",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Studio SE 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "8.3.32",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Studio SE 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "8.3.32",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT12X-USB-GY-G2, PT12X-USB-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT20X-USB-GY-G2, PT20X-USB-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PTVL-ZCAM, PTVL-NDI-ZCAM",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT12X-ZCAM, PT12X-NDI-ZCAM",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT20X-ZCAM, PT20X-NDI-ZCAM",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"product": "Studio Pro",
"versions": [
{
"status": "affected",
"version": "0"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Upgrade Tool",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-09-30T17:16:49.583",
"references": [
{
"url": "https://psirt.havsys.com/",
"source": "16cac6a8-cc1e-4741-89aa-6b97e2437706"
}
],
"vulnStatus": "Deferred",
"weaknesses": [
{
"type": "Secondary",
"source": "16cac6a8-cc1e-4741-89aa-6b97e2437706",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.\n\n\n\nThis vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:\n\n\n\n\n\n * Move 4K 12X before: 0.0.98\n * Move 4K 20X before: 0.1.33\n * Move 4K 30X before: 2.1.17\n * Link 4K 12X before: 0.0.99\n * Link 4K 20X before: 0.1.37\n * Link 4K 30X before: 2.1.18\n * Move SE 12X before: 9.1.66\n * Move SE 20X before: 9.1.44\n * Move SE 30X before: 9.1.46\n * Studio 4K 12X before: 8.3.32\n * Studio 4K 20X before: 8.3.32\n * Studio SE 12X before: 8.3.32\n * Studio SE 20X before: 8.3.32\n * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions\n * Upgrade Tool - All versions"
}
],
"lastModified": "2026-09-30T21:17:13.377",
"sourceIdentifier": "16cac6a8-cc1e-4741-89aa-6b97e2437706"
}