PTZOptics Missing Authentication in Firmware Upload
Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials. This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects: * Move 4K 12X before: 0.0.98 * Move 4K 20X before: 0.1.33 * Move 4K 30X before: 2.1.17 * Link 4K 12X before: 0.0.99 * Link 4K 20X before: 0.1.37 * Link 4K 30X before: 2.1.18 * Move SE 12X before: 9.1.66 * Move SE 20X before: 9.1.44 * Move SE 30X before: 9.1.46 * Studio 4K 12X before: 8.3.32 * Studio 4K 20X before: 8.3.32 * Studio SE 12X before: 8.3.32 * Studio SE 20X before: 8.3.32 * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions * Upgrade Tool - All versions
CVE-2026-75969
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-75969
Move 4K 12X
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Move 4K 20X
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Move 4K 30X
Source reference: /containers/cna/affected/2/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Link 4K 12X
Source reference: /containers/cna/affected/3/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Link 4K 20X
Source reference: /containers/cna/affected/4/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Link 4K 30X
Source reference: /containers/cna/affected/5/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Move SE 12X
Source reference: /containers/cna/affected/6/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Move SE 20X
Source reference: /containers/cna/affected/7/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Move SE 30X
Source reference: /containers/cna/affected/8/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Studio 4K 12X
Source reference: /containers/cna/affected/9/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Studio 4K 20X
Source reference: /containers/cna/affected/10/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Studio SE 12X
Source reference: /containers/cna/affected/11/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Studio SE 20X
Source reference: /containers/cna/affected/12/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2
Source reference: /containers/cna/affected/13/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
PT12X-USB-GY-G2, PT12X-USB-WH-G2
Source reference: /containers/cna/affected/14/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2
Source reference: /containers/cna/affected/15/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
PT20X-USB-GY-G2, PT20X-USB-WH-G2
Source reference: /containers/cna/affected/16/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2
Source reference: /containers/cna/affected/17/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
PTVL-ZCAM, PTVL-NDI-ZCAM
Source reference: /containers/cna/affected/18/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2
Source reference: /containers/cna/affected/19/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
PT12X-ZCAM, PT12X-NDI-ZCAM
Source reference: /containers/cna/affected/20/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
PT20X-ZCAM, PT20X-NDI-ZCAM
Source reference: /containers/cna/affected/21/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Studio Pro
Source reference: /containers/cna/affected/22/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Upgrade Tool
Source reference: /containers/cna/affected/23/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move 4K 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.0.98",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move 4K 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.1.33",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move 4K 30X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.1.17",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Link 4K 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.0.99",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Link 4K 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "0.1.37",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Link 4K 30X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.1.18",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move SE 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "9.1.66",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move SE 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "9.1.44",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Move SE 30X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "9.1.46",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Studio 4K 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "8.3.32",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Studio 4K 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "8.3.32",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Studio SE 12X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "8.3.32",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Studio SE 20X",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "8.3.32",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT12X-USB-GY-G2, PT12X-USB-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT20X-USB-GY-G2, PT20X-USB-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PTVL-ZCAM, PTVL-NDI-ZCAM",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT12X-ZCAM, PT12X-NDI-ZCAM",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "PT20X-ZCAM, PT20X-NDI-ZCAM",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"product": "Studio Pro",
"versions": [
{
"status": "affected",
"version": "0"
}
],
"defaultStatus": "affected"
},
{
"vendor": "PTZOptics",
"modules": [
"Firmware Update"
],
"product": "Upgrade Tool",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-75969
Source reference:
/cveMetadata/cveId
Publisher severity
critical
Source reference: /containers/cna/metrics
- Event
- #4915 · Revision 1
- Added to Heist Feed
- Publisher date