CVE-2026-75969

published 2026-09-30

CVE-2026-75969: Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing…

Priority P2 66 critical 9.1 CVSS 4.0

AV N AC L AT N PR N UI N VC H VI H VA H SC H SI H SA H E U CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R U V C RE L U Red

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.

This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:

* Move 4K 12X before: 0.0.98
* Move 4K 20X before: 0.1.33
* Move 4K 30X before: 2.1.17
* Link 4K 12X before: 0.0.99
* Link 4K 20X before: 0.1.37
* Link 4K 30X before: 2.1.18
* Move SE 12X before: 9.1.66
* Move SE 20X before: 9.1.44
* Move SE 30X before: 9.1.46
* Studio 4K 12X before: 8.3.32
* Studio 4K 20X before: 8.3.32
* Studio SE 12X before: 8.3.32
* Studio SE 20X before: 8.3.32
* All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions
* Upgrade Tool - All versions

Affected

15 ranges

Vendor	Product	Version range	Fixed in
ptzoptics	link_4k_12x	< 0.0.99	0.0.99
ptzoptics	link_4k_20x	< 0.1.37	0.1.37
ptzoptics	link_4k_30x	< 2.1.18	2.1.18
ptzoptics	move_4k_12x	< 0.0.98	0.0.98
ptzoptics	move_4k_20x	< 0.1.33	0.1.33
ptzoptics	move_4k_30x	< 2.1.17	2.1.17
ptzoptics	move_se_12x	< 9.1.66	9.1.66
ptzoptics	move_se_20x	< 9.1.44	9.1.44
ptzoptics	move_se_30x	< 9.1.46	9.1.46
ptzoptics	studio_4k_12x	< 8.3.32	8.3.32
ptzoptics	studio_4k_20x	< 8.3.32	8.3.32
ptzoptics	studio_pro	—	—
ptzoptics	studio_se_12x	< 8.3.32	8.3.32
ptzoptics	studio_se_20x	< 8.3.32	8.3.32
ptzoptics	upgrade_tool	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-306