CVE-2026-75969
PTZOptics Move 4K 12X
- PTZOptics Move 4K 12X
- Critical
- CVSS 9.1
- EPSS 0.35%
- Fixed version listed
What to do
Fixed version listed
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| PTZOptics Move 4K 12X | before 0.0.98 | 0.0.98 |
| PTZOptics Move 4K 20X | before 0.1.33 | 0.1.33 |
| PTZOptics Move 4K 30X | before 2.1.17 | 2.1.17 |
| PTZOptics Link 4K 12X | before 0.0.99 | 0.0.99 |
| PTZOptics Link 4K 20X | before 0.1.37 | 0.1.37 |
| PTZOptics Link 4K 30X | before 2.1.18 | 2.1.18 |
| PTZOptics Move SE 12X | before 9.1.66 | 9.1.66 |
| PTZOptics Move SE 20X | before 9.1.44 | 9.1.44 |
| PTZOptics Move SE 30X | before 9.1.46 | 9.1.46 |
| PTZOptics Studio 4K 12X | before 8.3.32 | 8.3.32 |
| PTZOptics Studio 4K 20X | before 8.3.32 | 8.3.32 |
| PTZOptics Studio SE 12X | before 8.3.32 | 8.3.32 |
| PTZOptics Studio SE 20X | before 8.3.32 | 8.3.32 |
| PTZOptics PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2 | every version | None listed |
| PTZOptics PT12X-USB-GY-G2, PT12X-USB-WH-G2 | every version | None listed |
| PTZOptics PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2 | every version | None listed |
| PTZOptics PT20X-USB-GY-G2, PT20X-USB-WH-G2 | every version | None listed |
| PTZOptics PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2 | every version | None listed |
| PTZOptics PTVL-ZCAM, PTVL-NDI-ZCAM | every version | None listed |
| PTZOptics PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2 | every version | None listed |
The CVE record lists 4 ranges this page cannot state exactly.
Scores and signals
- Exploitation
- No known exploitation
- Severity
- Critical, CVSS 9.1 (v4.0, scored by hsi)
- EPSS
- 0.35% chance of exploitation in the next 30 days (EPSS from FIRST, as of Oct 26, 2026)
- CISA's SSVC decision points
- Exploitation: none. Automatable: yes. Technical impact: total. As of Sep 30, 2026.
- Weakness
- CWE-306: Missing authentication for critical function
- Vendor
- PTZOptics, Move 4K 12X
Timeline
- First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.