CVE Program partner

Genetec

Genetec Inc.

API
CVEs, 365 days1013 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationGenetec Inc.
RoleCNA
TypeHosted Service, Vendor
Reports tomitre
ScopeGenetec products and solutions only.
Advisorieshttps://resources.genetec.com/security-advisories

Latest CVEs · RSS

  • CVE-2026-65422 2026-09-24 · CVSS 6.5
    A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails
  • CVE-2026-44629 2026-08-27 · CVSS 7.9
    Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances (SV-100E and SV-300E series)
  • CVE-2026-55727 2026-07-06 · CVSS 7.5
    A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14.0.0 prior to build 5.14.178.18 may allow an unauthenticated att
  • CVE-2026-40619 2026-06-02 · CVSS 7.8
    A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to th
  • CVE-2026-25112 2026-05-26 · CVSS 7.8
    A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.
  • CVE-2026-27768 2026-05-25 · CVSS 6.6
    SQL Injection affecting the Access Manager role.
  • CVE-2025-1789 2026-02-24 · CVSS 5.8
    Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privilege
  • CVE-2025-1787 2026-02-24 · CVSS 5.8
    Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit thi
  • CVE-2025-1790 2026-02-13 · CVSS 5.8
    Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user could exploit this vulnerability to gain elevated privileges
  • CVE-2025-43027 2025-10-30 · CVSS 9.8
    A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to th
  • CVE-2025-2928 2025-07-29 · CVSS 7.2
    SQL Injection affecting the Archiver role.
  • CVE-2024-7059 2024-11-05 · CVSS 8.0
    A high-severity vulnerability that can lead to arbitrary code execution on the system hosting the Web SDK role was found in the Genetec Security Center product
  • CVE-2023-1522 2023-04-05
    SQL Injection in the Hardware Inventory report of Security Center 5.11.2.

All CVE Program partners