Improper authentication in Genetec Security Center
Priority LOW 39CWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-287.
Summary
A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14.0.0 prior to build 5.14.178.18 may allow an unauthenticated attacker to access live video streams.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.005 43rd percentileScored 2026-11-07
Fix Fixed Genetec Security Center (Genetec Inc.): 5.14.0.0 build 5.14.178.18
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Genetec Inc. | Genetec Security Center | 5.14.0.0 build 5.14.178.8 to before 5.14.0.0 build 5.14.178.18 | 5.14.0.0 build 5.14.178.18 | Patch available | CNA |
- Genetec Security Center VendorGenetec Inc. Affected 5.14.0.0 build 5.14.178.8 to before 5.14.0.0 build 5.14.178.18 Fixed in 5.14.0.0 build 5.14.178.18 Patch available CNA
Remediation
- Fix · CNA Genetec Security Center (Genetec Inc.) Fixed in 5.14.0.0 build 5.14.178.18
Timeline
- 2026-10-02 Threatist record created from CVE-2026-55727
- 2026-10-03 Alias added: GHSA-3hmc-px3x-2cjr
References
More Genetec Inc. vulnerabilities
- TI-2025-27894 Improper access control in Genetec Security Center CVSS 3.1CRITICAL 9.8
- TI-2024-06541 A high-severity vulnerability that can lead to arbitrary code execution on the system… CVSS 4.0HIGH 8.9
- TI-2023-01436 SQL Injection in the Hardware Inventory report of Security Center 5.11.2. CVSS 3.1HIGH 8.8
- TI-2026-29351 Sensitive information in log files in Genetec Security Center CVSS 3.1HIGH 7.8
- TI-2026-20275 A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack. CVSS 3.1HIGH 7.8
- TI-2025-02559 SQL Injection affecting the Archiver role. CVSS 3.1HIGH 7.2
Sources
- CVE-2026-55727 · CVE Program
- CVE-2026-55727 · NVD
- FIRST EPSS
- GHSA-3hmc-px3x-2cjr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences