Vulnerabilities

TI-2026-53185 CVE-2026-75969 · GHSA-2q27-rwqh-vgpm

PTZOptics Missing Authentication in Firmware Upload

MEDIUM 47

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.0035 Published 2026-09-30 Fixed in 0.0.98, 0.1.33 +8 CWE-306

TI-2025-24593 CVE-2025-35452 · GHSA-gx6v-756j-7g8w

MEDIUM 49

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00886 Published 2025-09-05 Fixed in 9.1.43, 0.0.63 +18 CWE-1392

TI-2025-24592 CVE-2025-35451 · GHSA-j5fj-cv29-j569

MEDIUM 50

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00805 Published 2025-09-05 Fixed in 9.1.43, 0.0.63 +18 CWE-798

TI-2024-08317 CVE-2024-8957 · GHSA-9cx9-7v8g-h36v

CRITICAL 91KEV

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.7984 Published 2024-09-17 Fixed in 6.3.40 CWE-78

TI-2024-08316 CVE-2024-8956 · GHSA-58rw-8pf6-2mgq

CRITICAL 98KEV

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.58787 Published 2024-09-17 Fixed in 6.3.40 CWE-306