CVE-2026-75969: PTZOptics Missing Authentication in Firmware Upload

Severity: critical (CVSS 9.1 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-30 · updated 2026-09-30
Weakness: CWE-306

Description

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials. This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects: * Move 4K 12X before: 0.0.98 * Move 4K 20X before: 0.1.33 * Move 4K 30X before: 2.1.17 * Link 4K 12X before: 0.0.99 * Link 4K 20X before: 0.1.37 * Link 4K 30X before: 2.1.18 * Move SE 12X before: 9.1.66 * Move SE 20X before: 9.1.44 * Move SE 30X before: 9.1.46 * Studio 4K 12X before: 8.3.32 * Studio 4K 20X before: 8.3.32 * Studio SE 12X before: 8.3.32 * Studio SE 20X before: 8.3.32 * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions * Upgrade Tool - All versions

Affected products

PTZOptics Link 4K 12X: before 0.0.99 — fixed in 0.0.99
PTZOptics Link 4K 20X: before 0.1.37 — fixed in 0.1.37
PTZOptics Link 4K 30X: before 2.1.18 — fixed in 2.1.18
PTZOptics Move 4K 12X: before 0.0.98 — fixed in 0.0.98
PTZOptics Move 4K 20X: before 0.1.33 — fixed in 0.1.33
PTZOptics Move 4K 30X: before 2.1.17 — fixed in 2.1.17
PTZOptics Move SE 12X: before 9.1.66 — fixed in 9.1.66
PTZOptics Move SE 20X: before 9.1.44 — fixed in 9.1.44
PTZOptics Move SE 30X: before 9.1.46 — fixed in 9.1.46
PTZOptics PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2: 0
PTZOptics PT12X-USB-GY-G2, PT12X-USB-WH-G2: 0
PTZOptics PT12X-ZCAM, PT12X-NDI-ZCAM: 0
PTZOptics PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2: 0
PTZOptics PT20X-USB-GY-G2, PT20X-USB-WH-G2: 0
PTZOptics PT20X-ZCAM, PT20X-NDI-ZCAM: 0
PTZOptics PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2: 0
PTZOptics PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2: 0
PTZOptics PTVL-ZCAM, PTVL-NDI-ZCAM: 0
PTZOptics Studio 4K 12X: before 8.3.32 — fixed in 8.3.32
PTZOptics Studio 4K 20X: before 8.3.32 — fixed in 8.3.32
PTZOptics Studio Pro: 0
PTZOptics Studio SE 12X: before 8.3.32 — fixed in 8.3.32
PTZOptics Studio SE 20X: before 8.3.32 — fixed in 8.3.32
PTZOptics Upgrade Tool: 0

How to fix

Upgrade to a fixed version: PTZOptics Link 4K 12X 0.0.99; PTZOptics Link 4K 20X 0.1.37; PTZOptics Link 4K 30X 2.1.18; PTZOptics Move 4K 12X 0.0.98; PTZOptics Move 4K 20X 0.1.33; PTZOptics Move 4K 30X 2.1.17; PTZOptics Move SE 12X 9.1.66; PTZOptics Move SE 20X 9.1.44; PTZOptics Move SE 30X 9.1.46; PTZOptics Studio 4K 12X 8.3.32; PTZOptics Studio 4K 20X 8.3.32; PTZOptics Studio SE 12X 8.3.32. Check the vendor advisory for mitigations.

References

https://psirt.havsys.com/

Get alerted when CVE-2026-75969 or the next vulnerability affects your stack