CVE-2026-44629

Severity: high (CVSS 7.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-28 · updated 2026-09-09
Weakness: CWE-922

Description

Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances (SV-100E and SV-300E series) and Synergis Softwire installed on Windows servers.

Affected products

Genetec Inc. Synergis Softwire: all versions — fixed in 12.0.2

How to fix

Upgrade to a fixed version: Genetec Inc. Synergis Softwire 12.0.2. Check the vendor advisory for mitigations.

References

https://techdocs.genetec.com/r/en-US/Security-Updates-for-SynergisTM-Softwire-12.0/Resolved-vulnerabilities-in-Synergis-Softwire-12.0.2
https://techdocs.genetec.com/r/en-US/Security-Updates-for-SynergisTM-Softwire-12.2/Resolved-vulnerabilities-in-Synergis-Softwire-12.2.0

Get alerted when CVE-2026-44629 or the next vulnerability affects your stack