# CVE-2026-44629: Genetec Synergis Softwire improper access control in installation folder

Source: https://junglewise.ai/threats/cve-2026-44629-genetec-synergis-softwire-improper-access-control-in-installation  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-28. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-44629 · Severity: high · CVSS 7.9 · Published 2026-08-28

Synergis Softwire is a security software component used in Streamvault surveillance appliances and Windows server deployments. A flaw in access controls allows unauthorized users to access sensitive files in the Softwire installation directory, potentially exposing credentials, configuration data, or enabling lateral movement within a security infrastructure.

Vendors: [Genetec](https://junglewise.ai/threats/vendors/genetec).

## Quick answers

**Is CVE-2026-44629 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-44629 being exploited in the wild.

**How severe is CVE-2026-44629?** High severity, with a CVSS score of 7.9, published 28 August 2026.

**Which products and versions are affected?** Genetec Streamvault SV-100E <UNKNOWN>; Genetec Streamvault SV-300E <UNKNOWN>; Genetec Synergis Softwire below 12.0.2, below 12.2.0.

**Is there a fix for CVE-2026-44629?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-44629 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-44629?** Check whether you run Genetec Streamvault SV-100E, Genetec Streamvault SV-300E or Genetec Synergis Softwire at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability is an improper access control flaw affecting the Synergis Softwire installation folder on both Streamvault all-in-one appliances (SV-100E and SV-300E series) and Windows server installations. The root cause is inadequate permission checks on the installation directory, allowing users with local access to read or modify sensitive files without proper authentication. An attacker with local system access can exploit this to access protected configuration files or credentials. The vulnerability has been resolved in Synergis Softwire versions 12.0.2 and 12.2.0 or later.

## Affected products

- Genetec Synergis Softwire below 12.0.2, below 12.2.0
- Genetec Streamvault SV-100E <UNKNOWN>
- Genetec Streamvault SV-300E <UNKNOWN>

## Timeline

- 2026-08-28: disclosed

## References

- [https://techdocs.genetec.com/r/en-US/Security-Updates-for-SynergisTM-Softwire-12.0/Resolved-vulnerabilities-in-Synergis-Softwire-12.0.2](https://techdocs.genetec.com/r/en-US/Security-Updates-for-SynergisTM-Softwire-12.0/Resolved-vulnerabilities-in-Synergis-Softwire-12.0.2)
- [https://techdocs.genetec.com/r/en-US/Security-Updates-for-SynergisTM-Softwire-12.2/Resolved-vulnerabilities-in-Synergis-Softwire-12.2.0](https://techdocs.genetec.com/r/en-US/Security-Updates-for-SynergisTM-Softwire-12.2/Resolved-vulnerabilities-in-Synergis-Softwire-12.2.0)