Priority LOW 28
A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00201 · Published 2026-09-24 · Fixed in 5.12.2.22, >=5.12.2.22 +5 CWE-862
Priority LOW 33
Improper access control to the Synergis Softwire installation folder.
CVSS 3.1HIGH 7.9· Local · Low privileges · No interaction · EPSS 0.0015 · Published 2026-08-27 · Fixed in >=12.0.2 CWE-922
Priority LOW 39
A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14.0.0 prior to build 5.14.178.18 may allow an unauthenticated attacker to access live video streams.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.005 · Published 2026-07-06 · Fixed in 5.14.0.0 build 5.14.178.18 CWE-287
Priority LOW 35
A high security vulnerability affecting Security Center main server installations has been identified.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00115 · Published 2026-06-02 · Fixed in >5.10.4.0, >5.11.3.0 +3 CWE-532
Priority LOW 35
A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00145 · Published 2026-05-26 · Fixed in 3.13.7.19, >=3.13.7.19 +14 CWE-732
Priority LOW 31
SQL Injection affecting the Access Manager role.
CVSS 3.1MEDIUM 6.6· Network · High privileges · No interaction · EPSS 0.0034 · Published 2026-05-25 · Fixed in >=5.12.2.17, >=5.13.3.5 CWE-89
Priority LOW 27
Local privilege escalation in Genetec Update Service.
CVSS 4.0MEDIUM 5.8· Local · Low privileges · No interaction · EPSS 0.00118 · Published 2026-02-24 · Fixed in 2.10.600, >=2.10.600 CWE-276
Priority LOW 27
Local admin could to leak information from the Genetec Update Service configuration web page.
CVSS 4.0MEDIUM 5.8· Local · Low privileges · No interaction · EPSS 0.001 · Published 2026-02-24 · Fixed in 2.10.600, >=2.10.600 CWE-346
Priority LOW 27
Local privilege escalation in Genetec Sipelia Plugin.
CVSS 4.0MEDIUM 5.8· Local · Low privileges · No interaction · EPSS 0.00115 · Published 2026-02-13 · Fixed in 2.14.271, >=2.14.271 CWE-250
Priority MEDIUM 49
A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to the Genetec Security Center system.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00365 · Published 2025-10-30 · Fixed in >=5.9.5.10, 5.9.5.10 +4 CWE-284
Priority LOW 34
SQL Injection affecting the Archiver role.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00431 · Published 2025-07-29 · Fixed in >=5.9.5.9, >=5.10.4.28 +3 CWE-89
Priority MEDIUM 41
A high-severity vulnerability that can lead to arbitrary code execution on the system hosting the Web SDK role was found in the Genetec Security Center product line.
CVSS 4.0HIGH 8.9· Network · High privileges · No interaction · EPSS 0.0055 · Published 2024-11-05 · Fixed in 5.8.2.1, >=5.8.2.1 +5 CWE-470
Priority MEDIUM 41
SQL Injection in the Hardware Inventory report of Security Center 5.11.2.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00598 · Published 2023-04-05 · No fix listed CWE-89
THREATIST.IORead the docs