CVE-2026-44629: CWE-922: Insecure Storage of Sensitive Information in Genetec Inc. Synergis Softwire

This vulnerability (CVE-2026-44629) concerns improper access control in the Synergis Softwire installation folder, which results in insecure storage of sensitive information. It affects Streamvault appliances SV-100E and SV-300E series and Synergis Softwire on Windows servers. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) indicates local attack vector with low attack complexity, requiring low privileges and no user interaction, with a scope change and high confidentiality impact, along with low integrity and availability impacts. No patch or remediation details are provided in the input data.

The vulnerability allows an attacker with local access and low privileges to bypass proper access controls on the installation folder, potentially exposing sensitive information. This can lead to a significant confidentiality breach, with some impact on integrity and availability of the affected systems. The scope change in the CVSS vector suggests the vulnerability affects resources beyond the initially compromised component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restrict local access to affected systems and installation folders to trusted users only.