{"schema":"threatline.record/2","record":{"id":"CVE-2026-75969","aliases":[],"summary":"PTZOptics Missing Authentication in Firmware Upload","details":"Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.\n\n\n\nThis vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:\n\n\n\n\n\n  *  Move 4K 12X before: 0.0.98\n  *  Move 4K 20X before: 0.1.33\n  *  Move 4K 30X before: 2.1.17\n  *  Link 4K 12X before: 0.0.99\n  *  Link 4K 20X before: 0.1.37\n  *  Link 4K 30X before: 2.1.18\n  *  Move SE 12X before: 9.1.66\n  *  Move SE 20X before: 9.1.44\n  *  Move SE 30X before: 9.1.46\n  *  Studio 4K 12X before: 8.3.32\n  *  Studio 4K 20X before: 8.3.32\n  *  Studio SE 12X before: 8.3.32\n  *  Studio SE 20X before: 8.3.32\n  *  All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions\n  *  Upgrade Tool - All versions","categories":["Unclassified"],"product":"Move 4K 12X","vendor":"PTZOptics","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Move 4K 12X","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","lessThan":"0.0.98","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Move 4K 20X","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","lessThan":"0.1.33","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Move 4K 30X","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","lessThan":"2.1.17","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Link 4K 12X","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","lessThan":"0.0.99","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Link 4K 20X","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","lessThan":"0.1.37","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Link 4K 30X","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","lessThan":"2.1.18","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Move SE 12X","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","lessThan":"9.1.66","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Move SE 20X","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","lessThan":"9.1.44","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Move SE 30X","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","lessThan":"9.1.46","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Studio 4K 12X","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","lessThan":"8.3.32","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Studio 4K 20X","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","lessThan":"8.3.32","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Studio SE 12X","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","lessThan":"8.3.32","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Studio SE 20X","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","lessThan":"8.3.32","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"PT12X-USB-GY-G2, PT12X-USB-WH-G2","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"PT20X-USB-GY-G2, PT20X-USB-WH-G2","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"PTVL-ZCAM, PTVL-NDI-ZCAM","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"PT12X-ZCAM, PT12X-NDI-ZCAM","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"PT20X-ZCAM, PT20X-NDI-ZCAM","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Studio Pro","vendor":"PTZOptics","versions":[{"status":"affected","version":"0"}],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Upgrade Tool","vendor":"PTZOptics","versions":[{"status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Move 4K 12X","ecosystem":null},"version":"0.0.98","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Move 4K 20X","ecosystem":null},"version":"0.1.33","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Move 4K 30X","ecosystem":null},"version":"2.1.17","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Link 4K 12X","ecosystem":null},"version":"0.0.99","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Link 4K 20X","ecosystem":null},"version":"0.1.37","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Link 4K 30X","ecosystem":null},"version":"2.1.18","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Move SE 12X","ecosystem":null},"version":"9.1.66","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Move SE 20X","ecosystem":null},"version":"9.1.44","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Move SE 30X","ecosystem":null},"version":"9.1.46","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Studio 4K 12X","ecosystem":null},"version":"8.3.32","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Studio 4K 20X","ecosystem":null},"version":"8.3.32","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Studio SE 12X","ecosystem":null},"version":"8.3.32","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","source_modified_at":"2026-09-30T20:01:02.432Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Studio SE 20X","ecosystem":null},"version":"8.3.32","basis":"first unaffected version stated in the CVE record"}],"cvss":9.1,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.0035,"percentile":0.27463,"score_date":"2026-10-23"},"published_at":"2026-09-30T16:27:51.490Z","modified_at":"2026-09-30T20:01:02.432Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-75969","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-09-30T20:01:02.432Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-75969","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://psirt.havsys.com/"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"total","assessed_at":"2026-09-30T18:30:11.739848Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-09-30T20:01:02.432Z","content_hash":"63d0943a2910cfbedd01632f05653d9efb9ff7673d3417e6a9476e198f48902c"}}