CVE-2026-759699.1CriticalCWE-306

CVE-2026-75969: PTZOptics Missing Authentication in Firmware Upload

PTZOptics · Move 4K 12X

Vendor fix available · Affected: PTZOptics Move 4K 12X · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.3%probability of exploitation in the next 30 days

29th percentile

050100

Higher than 29% of scored CVEs

9.1CriticalCVSS 4.0

LowMediumHighCrit.

DescriptionCVE.org

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials. This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects: * Move 4K 12X before: 0.0.98 * Move 4K 20X before: 0.1.33 * Move 4K 30X before: 2.1.17 * Link 4K 12X before: 0.0.99 * Link 4K 20X before: 0.1.37 * Link 4K 30X before: 2.1.18 * Move SE 12X before: 9.1.66 * Move SE 20X before: 9.1.44 * Move SE 30X before: 9.1.46 * Studio 4K 12X before: 8.3.32 * Studio 4K 20X before: 8.3.32 * Studio SE 12X before: 8.3.32 * Studio SE 20X before: 8.3.32 * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions * Upgrade Tool - All versions

Affected products20

From the CVE record. A product or version that is not listed is unknown, not unaffected.

PTZOptics · Move 4K 12Xbefore 0.0.98
PTZOptics · Move 4K 20Xbefore 0.1.33
PTZOptics · Move 4K 30Xbefore 2.1.17
PTZOptics · Link 4K 12Xbefore 0.0.99
PTZOptics · Link 4K 20Xbefore 0.1.37
PTZOptics · Link 4K 30Xbefore 2.1.18
PTZOptics · Move SE 12Xbefore 9.1.66
PTZOptics · Move SE 20Xbefore 9.1.44
PTZOptics · Move SE 30Xbefore 9.1.46
PTZOptics · Studio 4K 12Xbefore 8.3.32
PTZOptics · Studio 4K 20Xbefore 8.3.32
PTZOptics · Studio SE 12Xbefore 8.3.32
PTZOptics · Studio SE 20Xbefore 8.3.32
PTZOptics · PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G20
PTZOptics · PT12X-USB-GY-G2, PT12X-USB-WH-G20
PTZOptics · PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G20
PTZOptics · PT20X-USB-GY-G2, PT20X-USB-WH-G20
PTZOptics · PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G20
PTZOptics · PTVL-ZCAM, PTVL-NDI-ZCAM0
PTZOptics · PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G20

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Missing Authentication · Authentication
Vendor: PTZOptics
Published: September 2026
Band: Unlikely (under 1%), September 2026

CoverageNo articles yet

No CyberSIXT article names CVE-2026-75969 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.