Read the docs
TI-2026-20275 Aliases CVE-2026-25112GHSA-7vxw-69v7-42x7

A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.

Priority LOW 35CWE-732Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00145 3rd percentileScored 2026-11-07
Fix Fixed Genetec RabbitMQ (Genetec Inc.): 3.13.7.19, >=3.13.7.19Genetec Mission Control (Genetec Inc.): 3.4.1.0, >=3.4.1.0+5 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Genetec Inc.Genetec RabbitMQbefore 3.13.7.193.13.7.19, >=3.13.7.19Patch availableCNA
Genetec Inc.Genetec Mission Controlbefore 3.4.1.03.4.1.0, >=3.4.1.0Patch availableCNA
Genetec Inc.Genetec Sipeliabefore 2.112.11, >=2.11Patch availableCNA
Genetec Inc.Genetec Industrial IoTbefore 5.5.118.0; before 6.0.196.05.5.118.0, >=5.5.118.0, 6.0.196.0, >=6.0.196.0Patch availableCNA
Genetec Inc.Genetec Airport Operational Managerbefore 1.61.6, >=1.6Patch availableCNA
Genetec Inc.Genetec Restricted Security Areabefore 5.2.15.2.1, >=5.2.1Patch availableCNA
Genetec Inc.Genetec Inter-System Gatewaybefore 1.21.2, >=1.2Patch availableCNA
  • Genetec RabbitMQ VendorGenetec Inc. Affected before 3.13.7.19 Fixed in 3.13.7.19, >=3.13.7.19 Patch available CNA
  • Genetec Mission Control VendorGenetec Inc. Affected before 3.4.1.0 Fixed in 3.4.1.0, >=3.4.1.0 Patch available CNA
  • Genetec Sipelia VendorGenetec Inc. Affected before 2.11 Fixed in 2.11, >=2.11 Patch available CNA
  • Genetec Industrial IoT VendorGenetec Inc. Affected before 5.5.118.0; before 6.0.196.0 Fixed in 5.5.118.0, >=5.5.118.0, 6.0.196.0, >=6.0.196.0 Patch available CNA
  • Genetec Airport Operational Manager VendorGenetec Inc. Affected before 1.6 Fixed in 1.6, >=1.6 Patch available CNA
  • Genetec Restricted Security Area VendorGenetec Inc. Affected before 5.2.1 Fixed in 5.2.1, >=5.2.1 Patch available CNA
  • Genetec Inter-System Gateway VendorGenetec Inc. Affected before 1.2 Fixed in 1.2, >=1.2 Patch available CNA

Remediation

  • Fix · CNA Genetec RabbitMQ (Genetec Inc.) Fixed in 3.13.7.19, >=3.13.7.19
  • Fix · CNA Genetec Mission Control (Genetec Inc.) Fixed in 3.4.1.0, >=3.4.1.0
  • Fix · CNA Genetec Sipelia (Genetec Inc.) Fixed in 2.11, >=2.11
  • Fix · CNA Genetec Industrial IoT (Genetec Inc.) Fixed in 5.5.118.0, >=5.5.118.0, 6.0.196.0, >=6.0.196.0
  • Fix · CNA Genetec Airport Operational Manager (Genetec Inc.) Fixed in 1.6, >=1.6
  • Fix · CNA Genetec Restricted Security Area (Genetec Inc.) Fixed in 5.2.1, >=5.2.1
  • Fix · CNA Genetec Inter-System Gateway (Genetec Inc.) Fixed in 1.2, >=1.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-25112
  2. 2026-10-03 Alias added: GHSA-7vxw-69v7-42x7

References

Other 2

  • TI-2025-27894 Improper access control in Genetec Security Center CVSS 3.1CRITICAL 9.8
  • TI-2024-06541 A high-severity vulnerability that can lead to arbitrary code execution on the system… CVSS 4.0HIGH 8.9
  • TI-2023-01436 SQL Injection in the Hardware Inventory report of Security Center 5.11.2. CVSS 3.1HIGH 8.8
  • TI-2026-40225 Improper authentication in Genetec Security Center CVSS 3.1HIGH 7.5
  • TI-2026-29351 Sensitive information in log files in Genetec Security Center CVSS 3.1HIGH 7.8
  • TI-2025-02559 SQL Injection affecting the Archiver role. CVSS 3.1HIGH 7.2
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences