All vulnerabilities
CVE-2026-75969

Move 4K 12X: PTZOptics Missing Authentication in Firmware Upload

PTZOptics Move 4K 12X
Open in ThreatlineRecord JSON
CVSS
9.1Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.35%Chance of exploitation activity in the next 30 days, higher than 27% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in0.0.98Also 0.1.33, 2.1.17 and 7 moreCVE List
Published30 Sep 2026Updated 30 Sep 2026CVE List

What fixes it

Show all 13 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials.

This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects:

  • Move 4K 12X before: 0.0.98
  • Move 4K 20X before: 0.1.33
  • Move 4K 30X before: 2.1.17
  • Link 4K 12X before: 0.0.99
  • Link 4K 20X before: 0.1.37
  • Link 4K 30X before: 2.1.18
  • Move SE 12X before: 9.1.66
  • Move SE 20X before: 9.1.44
  • Move SE 30X before: 9.1.46
  • Studio 4K 12X before: 8.3.32
  • Studio 4K 20X before: 8.3.32
  • Studio SE 12X before: 8.3.32
  • Studio SE 20X before: 8.3.32
  • All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions
  • Upgrade Tool - All versions

Text from CVE List

Affected versions 24

  • Move 4K 12Xaffected: all versions before 0.0.98CVE List
  • Move 4K 20Xaffected: all versions before 0.1.33CVE List
  • Move 4K 30Xaffected: all versions before 2.1.17CVE List
  • Link 4K 12Xaffected: all versions before 0.0.99CVE List
  • Link 4K 20Xaffected: all versions before 0.1.37CVE List
  • Link 4K 30Xaffected: all versions before 2.1.18CVE List
  • Move SE 12Xaffected: all versions before 9.1.66CVE List
  • Move SE 20Xaffected: all versions before 9.1.44CVE List
  • Move SE 30Xaffected: all versions before 9.1.46CVE List
  • Studio 4K 12Xaffected: all versions before 8.3.32CVE List
  • Studio 4K 20Xaffected: all versions before 8.3.32CVE List
  • Studio SE 12Xaffected: all versions before 8.3.32CVE List
  • Studio SE 20Xaffected: all versions before 8.3.32CVE List
  • PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2affected: version unspecifiedCVE List
  • PT12X-USB-GY-G2, PT12X-USB-WH-G2affected: version unspecifiedCVE List
  • PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2affected: version unspecifiedCVE List
  • PT20X-USB-GY-G2, PT20X-USB-WH-G2affected: version unspecifiedCVE List
  • PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2affected: version unspecifiedCVE List
  • PTVL-ZCAM, PTVL-NDI-ZCAMaffected: version unspecifiedCVE List
  • PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2affected: version unspecifiedCVE List
  • PT12X-ZCAM, PT12X-NDI-ZCAMaffected: version unspecifiedCVE List
  • PT20X-ZCAM, PT20X-NDI-ZCAMaffected: version unspecifiedCVE List
  • Studio Proaffected: version unspecifiedCVE List
  • Upgrade Toolaffected: version unspecifiedCVE List

References 1