VAST 2 EoM. CVE-2026-22755. Delta take-private. March Networks merger.
VAST 2 End-of-Maintenance
VIVOTEK has stopped feature and security updates for VAST 2. Customers are being pushed onto VSS (paid on-prem successor) or VORTEX (direct-to-cloud). Either way, the platform changes.
CVE-2026-22755 across 33+ models
Akamai SIRT disclosed a critical unauthenticated command injection in January 2026 affecting 33+ VIVOTEK camera models (FD, FE, IB, IP, IT, MA, MS, TB series, firmware 0100a-0125c). Sites running VAST 2 or any of these models on an Internet-reachable interface are exposed; ringfencing is the only mitigation short of migrating.
Delta take-private completed
Delta has been majority owner since 2017 (tender ~49.2% → ~57%). On 1 Dec 2025 the boards approved a ~NT$3.7B / US$118.8M cash buyout of the remaining minority shares at NT$100/share (~16.8% premium); take-private completed Dec 2025, effective ~27 Mar 2026. VIVOTEK's roadmap now sits fully inside Delta's smart-building portfolio with no minority-shareholder check.
VIVOTEK branded business merging into March Networks
23 March 2026 announcement: VIVOTEK's branded (OBM) business is merging into March Networks (Ottawa, Delta-owned since Dec 2021), closing mid-April 2026. Combined ~US$200M revenue, 300+ R&D, 70+ countries, led by Peter Strom. Both brand names remain. Open question for VAST 2 / VSS / VORTEX customers: which of those three roadmaps survives the consolidation - and how it fits with March Networks Searchlight / AI Smart Search.
Camera-OEM VMS, not genuinely open
VAST 2 / VSS support third-party cameras over ONVIF, but analytics, two-way audio, PTZ presets and motion zones are richest on VIVOTEK kit; in practice deployments skew 100% VIVOTEK. VORTEX is more restrictive again: cloud recording requires VORTEX-branded camera SKUs and the subscription has a whole-organisation tier lock (xLite / xStd / xPro applies to every device on the account).
IPVM tested VORTEX "weakly" vs Western VSaaS
In 2023 IPVM benchmarked VORTEX against Verkada, Rhombus, Eagle Eye, Meraki and Avigilon Alta. VORTEX placed behind on cloud analytics depth, no natural-language search, whole-org tier lock and VORTEX-only camera SKU restriction for cloud recording. The 2025-26 Western VSaaS feature war is GenAI / natural-language video search; VORTEX has not shipped a comparable feature publicly.
EoM legacy + camera-OEM lock vs cloud-native VMS that keeps your cameras.
Pricing figures, ownership, acquisition dates and product behaviour cited on this page are point-in-time and drawn from public sources - see the disclaimer at the bottom of this page for sourcing, "as of" date, and how to flag corrections.
Questions before you migrate off VAST 2
VIVOTEK (TWSE: 3454) is a Taiwanese camera manufacturer founded February 2000 in Taipei. Delta Electronics first took a majority stake in 2017 (Aug-Sep tender at NT$98/share, ~49.2% rising to ~57%) and on 1 December 2025 the boards approved a cash buyout of the remaining minority shares at NT$100/share (~16.8% premium, ~NT$3.73B / ~US$118.8M total). The take-private completed in December 2025 with an effective date of ~27 March 2026. On 23 March 2026 VIVOTEK's branded (OBM) business announced a merger into March Networks (Delta's Canadian sister company), closing mid-April 2026; combined revenue ~US$200M, 300+ R&D engineers, 70+ countries, both brand names remaining in market. For the latest corporate structure, the manufacturer's site is authoritative.
Two parallel pressures sit on the VMS side. VAST 2, VIVOTEK's long-running Windows software VMS, is now End-of-Maintenance and customers are being pushed onto VSS (the paid on-prem successor) or VORTEX (their direct-to-cloud VSaaS). CVE-2026-22755, disclosed by Akamai SIRT in January 2026, is a critical unauthenticated command injection affecting 33+ camera models and there is no fix on the EoM track. Integrators with VAST 2 sites are facing a forced platform change either way. TetherX is the cloud-native, channel-friendly migration path that keeps the VIVOTEK cameras in place.
The basics work. VIVOTEK IP cameras are broadly ONVIF Profile S/G/T compliant and TetherX supports them as standard - the existing VIVOTEK fleet keeps streaming on TetherX with no rip-and-replace.
Be aware of the camera-OEM-VMS reality. Like most camera-OEM VMS platforms, deeper functions such as edge analytics, two-way audio, PTZ presets and motion-zone configuration are richest with the manufacturer's own software and are partially exposed over ONVIF. For pure live + recorded video, search and event review across a mixed fleet this is not an issue; for a single-vendor estate that relies on VIVOTEK-specific edge analytics, validate the exact features you need before committing.
End-of-Maintenance means VIVOTEK has stopped shipping feature updates and security patches against VAST 2. Any CVE published against the codebase, or against legacy camera firmware that VAST 2 talks to (including the CVE-2026-22755 family disclosed in January 2026), does not get a fix on the EoM track. Customers are expected to migrate to VSS or VORTEX.
The forced-migration window is the right moment to assess whether to relicense inside the VIVOTEK / Delta ecosystem or move to a separate VMS layer. TetherX supports VIVOTEK cameras over ONVIF, runs on the cloud-native model VAST 2 never had, and ringfences the cameras behind a TetherBox over an outbound-only encrypted tunnel so any future CVE on any camera or middleware is contained.
Delta Electronics is a Taiwanese listed conglomerate (TWSE: 2308, founded 1971) covering power electronics, EV infrastructure, industrial automation and now physical security. Delta has been majority owner of VIVOTEK since 2017 and completed the take-private buyout in December 2025; VIVOTEK's effective delisting date was ~27 March 2026.
On 23 March 2026 Delta announced that VIVOTEK's branded (OBM) business will merge into March Networks (Ottawa-based, Delta-owned since December 2021), closing mid-April 2026. The combined organisation is ~US$200M revenue with 300+ R&D engineers across 70+ countries, led by March Networks CEO Peter Strom. VIVOTEK's ODM/manufacturing arm stays separate. Both brand names remain in market. For customers the practical questions are: which of the three VMS products (VAST 2, VSS, VORTEX) gets continued engineering investment under the merged entity, and how does that interact with the March Networks Searchlight / AI Smart Search roadmap. The manufacturer's site is the authoritative source for current product status.
Want this at your site?
Get a quote from a certified TetherX installer. We will match you with a local partner who knows your area and your needs.
See TetherX against another VMS
Researching options? Read the side-by-side for each VMS the channel asks about most.
Still have questions about VAST 2 migration, camera support or CVE mitigation?
Try TetherX free for 30 days
Run TetherX alongside an existing VAST 2 install while you plan migration. VIVOTEK cameras keep working. Trial extensions on request.
Start Free TrialAbout this comparison. Information about other vendors is drawn from their public product pages, datasheets, integrator forums (Reddit, vendor user groups), public CVE databases (NVD, CISA) and customer conversations - accurate to the best of our knowledge as of Q2 2026. Pricing, features, security posture and policies change. A vendor may have shipped a fix, dropped a price, added a region or changed an architecture since this page was last reviewed.
If you believe anything here is inaccurate or out of date, please contact us and we will review and correct it. Trademarks and product names belong to their respective owners and are referenced here for identification only.