CVE-2026-44629: CWE-922: Insecure Storage of Sensitive Information in Genetec Inc. Synergis Softwire

This vulnerability (CWE-922) arises from improper access control to the Synergis Softwire installation folder on affected devices, including Streamvault SV-100E and SV-300E series appliances and Synergis Softwire installed on Windows servers. The flaw allows unauthorized local access to sensitive information stored insecurely. The CVSS 3.1 score is 7.9 (High), with attack vector local, low attack complexity, low privileges required, no user interaction, scope changed, and impacts including high confidentiality, low integrity, and low availability.

An attacker with local access and low privileges can exploit this vulnerability to gain access to sensitive information stored insecurely in the installation folder. This leads to a high confidentiality impact, potentially exposing critical data. Integrity and availability impacts are low. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor Genetec Inc. advisories for updates. Until a fix is available, restrict local access to affected systems and installation folders to trusted personnel only.