<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Genetec Inc. — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/genetec" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Genetec Inc. (genetec).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/genetec.png</url>
      <title>Genetec Inc. — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-65422 · 6.5 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2026-65422</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-65422</guid>
      <description>A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails.</description>
      <category>Medium</category>
      <pubDate>Thu, 24 Sep 2026 14:39:03 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-44629 · 7.9 HIGH</title>
      <link>https://vulnogram.org/CVE-2026-44629</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-44629</guid>
      <description>Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances (SV-100E and SV-300E series) and Synergis Softwire installed on Windows servers.</description>
      <category>High</category>
      <pubDate>Thu, 27 Aug 2026 22:08:52 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-55727 · 7.5 HIGH</title>
      <link>https://vulnogram.org/CVE-2026-55727</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-55727</guid>
      <description>A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14.0.0 prior to build 5.14.178.18 may allow an unauthenticated attacker to access live video streams.</description>
      <category>High</category>
      <pubDate>Mon, 06 Jul 2026 20:00:01 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-40619 · 7.8 HIGH</title>
      <link>https://vulnogram.org/CVE-2026-40619</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-40619</guid>
      <description>A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to access the Server Admin credentials. A third party hired by Genetec found…</description>
      <category>High</category>
      <pubDate>Tue, 02 Jun 2026 14:37:53 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-25112 · 7.8 HIGH</title>
      <link>https://vulnogram.org/CVE-2026-25112</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-25112</guid>
      <description>A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.</description>
      <category>High</category>
      <pubDate>Tue, 26 May 2026 14:52:37 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-27768 · 6.6 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2026-27768</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-27768</guid>
      <description>SQL Injection affecting the Access Manager role.</description>
      <category>Medium</category>
      <pubDate>Mon, 25 May 2026 15:39:31 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-1789 · 5.8 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-1789</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-1789</guid>
      <description>Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system.</description>
      <category>Medium</category>
      <pubDate>Tue, 24 Feb 2026 18:47:24 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-1787 · 5.8 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-1787</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-1787</guid>
      <description>Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combin…</description>
      <category>Medium</category>
      <pubDate>Tue, 24 Feb 2026 18:44:36 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-1790 · 5.8 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-1790</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-1790</guid>
      <description>Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user could exploit this vulnerability to gain elevated privileges on the affected system.</description>
      <category>Medium</category>
      <pubDate>Fri, 13 Feb 2026 16:45:06 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-43027 · 9.8 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2025-43027</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-43027</guid>
      <description>A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to the Genetec Security Center system. The Genetec engineering team discovered this issue inter…</description>
      <category>Critical</category>
      <pubDate>Thu, 30 Oct 2025 14:12:27 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-2928 · 7.2 HIGH</title>
      <link>https://vulnogram.org/CVE-2025-2928</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-2928</guid>
      <description>SQL Injection affecting the Archiver role.</description>
      <category>High</category>
      <pubDate>Tue, 29 Jul 2025 17:44:23 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-7059 · 8.9 HIGH</title>
      <link>https://vulnogram.org/CVE-2024-7059</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-7059</guid>
      <description>A high-severity vulnerability that can lead to arbitrary code execution on the system hosting the Web SDK role was found in the Genetec Security Center product line.</description>
      <category>High</category>
      <pubDate>Tue, 05 Nov 2024 13:13:29 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-1522 · 8.8 HIGH</title>
      <link>https://vulnogram.org/CVE-2023-1522</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-1522</guid>
      <description>SQL Injection in the Hardware Inventory report of Security Center 5.11.2.</description>
      <category>High</category>
      <pubDate>Wed, 05 Apr 2023 18:51:02 GMT</pubDate>
    </item>
  </channel>
</rss>
