Critical severity · published Sep 30, 2026
CVE-2026-75969
PTZOptics Missing Authentication in Firmware Upload
9.1
CVSS
0.4%
EPSS
No
On KEV
Description
Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials. This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects: * Move 4K 12X before: 0.0.98 * Move 4K 20X before: 0.1.33 * Move 4K 30X before: 2.1.17 * Link 4K 12X before: 0.0.99 * Link 4K 20X before: 0.1.37 * Link 4K 30X before: 2.1.18 * Move SE 12X before: 9.1.66 * Move SE 20X before: 9.1.44 * Move SE 30X before: 9.1.46 * Studio 4K 12X before: 8.3.32 * Studio 4K 20X before: 8.3.32 * Studio SE 12X before: 8.3.32 * Studio SE 20X before: 8.3.32 * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions * Upgrade Tool - All versions
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
L4
Link 4K 12X · PTZOptics
before 0.0.99 · source: vendor
L4
Link 4K 20X · PTZOptics
before 0.1.37 · source: vendor
L4
Link 4K 30X · PTZOptics
before 2.1.18 · source: vendor
M4
Move 4K 12X · PTZOptics
before 0.0.98 · source: vendor
M4
Move 4K 20X · PTZOptics
before 0.1.33 · source: vendor
M4
Move 4K 30X · PTZOptics
before 2.1.17 · source: vendor
MS
Move SE 12X · PTZOptics
before 9.1.66 · source: vendor
MS
Move SE 20X · PTZOptics
before 9.1.44 · source: vendor
MS
Move SE 30X · PTZOptics
before 9.1.46 · source: vendor