Skip to content
Fencer Vulns
critical 9.1

CVE-2026-75969 json

PTZOptics Missing Authentication in Firmware Upload

published 2026-09-30 39 d ago modified 2026-09-30 39 d ago also EUVD-2026-90084

cvss
9.1
version 4.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 28%
public exploits
0
none known

Summary

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.

This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:

* Move 4K 12X before: 0.0.98 * Move 4K 20X before: 0.1.33 * Move 4K 30X before: 2.1.17 * Link 4K 12X before: 0.0.99 * Link 4K 20X before: 0.1.37 * Link 4K 30X before: 2.1.18 * Move SE 12X before: 9.1.66 * Move SE 20X before: 9.1.44 * Move SE 30X before: 9.1.46 * Studio 4K 12X before: 8.3.32 * Studio 4K 20X before: 8.3.32 * Studio SE 12X before: 8.3.32 * Studio SE 20X before: 8.3.32 * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions * Upgrade Tool - All versions

Patch / fix

  • PTZOptics Move 4K 12X 0.0.98
  • PTZOptics Move 4K 20X 0.1.33
  • PTZOptics Move 4K 30X 2.1.17
  • PTZOptics Link 4K 12X 0.0.99
  • PTZOptics Link 4K 20X 0.1.37
  • PTZOptics Link 4K 30X 2.1.18
  • PTZOptics Move SE 12X 9.1.66
  • PTZOptics Move SE 20X 9.1.44
  • PTZOptics Move SE 30X 9.1.46
  • PTZOptics Studio 4K 12X 8.3.32
  • PTZOptics Studio 4K 20X 8.3.32
  • PTZOptics Studio SE 12X 8.3.32
  • PTZOptics Studio SE 20X 8.3.32

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
total
Assessed
39 d ago

Exploit prediction

0.35% chance of exploitation in the next 30 days, higher than 28% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 4.0 9.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/R:U/V:C/RE:L/U:Red
CNA 4.0 9.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:C/RE:L/U:Red

Affected products

  • PTZOptics Move 4K 12X
  • PTZOptics Move 4K 20X
  • PTZOptics Move 4K 30X
  • PTZOptics Link 4K 12X
  • PTZOptics Link 4K 20X
  • PTZOptics Link 4K 30X
  • PTZOptics Move SE 12X
  • PTZOptics Move SE 20X
  • PTZOptics Move SE 30X
  • PTZOptics Studio 4K 12X
  • PTZOptics Studio 4K 20X
  • PTZOptics Studio SE 12X
  • PTZOptics Studio SE 20X
  • PTZOptics PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2
  • PTZOptics PT12X-USB-GY-G2, PT12X-USB-WH-G2
  • PTZOptics PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2
  • PTZOptics PT20X-USB-GY-G2, PT20X-USB-WH-G2
  • PTZOptics PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2
  • PTZOptics PTVL-ZCAM, PTVL-NDI-ZCAM
  • PTZOptics PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2
  • PTZOptics PT12X-ZCAM, PT12X-NDI-ZCAM
  • PTZOptics PT20X-ZCAM, PT20X-NDI-ZCAM
  • PTZOptics Studio Pro
  • PTZOptics Upgrade Tool

Classification

Weakness
  • CWE-306 Missing Authentication for Critical Functionality

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.