CVE-2026-44629

Deferred Deferred - Pending Action

Improper Access Control in Synergis Softwire and Streamvault Appliances

Publication date: 2026-08-28

Last updated on: 2026-09-09

Assigner: Genetec Inc.

Description

Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances (SV-100E and SV-300E series) and Synergis Softwire installed on Windows servers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-09-09

Generated

2026-09-17

AI Q&A

2026-08-28

EPSS Evaluated

2026-09-15

NVD

CVE-2026-44629

EUVD

EUVD-2026-67296

Affected Vendors & Products

Vendor	Product	Version / Range
synergis	softwire	*
genetec	streamvault	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-922	The product stores sensitive information without properly limiting read or write access by unauthorized actors.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper access control to the Synergis Softwire installation folder. It affects Streamvault all-in-one appliances (SV-100E and SV-300E series) and Synergis Softwire installed on Windows servers.

Detection Guidance

Check for unauthorized access to the Synergis Softwire installation folder on Streamvault appliances (SV-100E, SV-300E) or Windows servers running Synergis Softwire. Review folder permissions and audit logs for suspicious activity.

Impact Analysis

An attacker with access to the installation folder could exploit this to gain elevated privileges or perform unauthorized actions. This may lead to data breaches, system compromise, or disruption of services.

Compliance Impact

The vulnerability involves improper access control to the Synergis Softwire installation folder, which could allow unauthorized access to sensitive data. This may impact compliance with standards like GDPR and HIPAA by potentially exposing personal or health information due to insufficient access restrictions.

Mitigation Strategies

Restrict access permissions to the Synergis Softwire installation folder on affected systems. Ensure only authorized users have read/write access. Review and update user permissions for Streamvault appliances (SV-100E and SV-300E series) and Synergis Softwire installations on Windows servers.

Hi! I’m here to help you understand CVE-2026-44629. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70