Improper Access Control in Synergis Softwire and Streamvault Appliances
CVE-2026-44629

7.9HIGH

Key Information:

Vendor

Genetec Inc.

Status
Synergis Softwire
Vendor
CVE Published:
27 August 2026

What is CVE-2026-44629?

This vulnerability involves inadequate access controls within the installation folder of Synergis Softwire, affecting both the Streamvault SV-100E and SV-300E series appliances and installations on Windows servers. If exploited, it may allow unauthorized access, potentially exposing sensitive information or enabling unauthorized operations within the system. Ensuring proper access permissions and regular updates is crucial to maintain security.

Affected Version(s)

Synergis Softwire Streamvault all-in-one appliances (SV-100E and SV-300E series) >=12.0.2

References

https://techdocs.genetec.com/r/en-US/Security-Updates-for...
https://techdocs.genetec.com/r/en-US/Security-Updates-for...

CVSS V3.1

Score:
7.9
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.