CVE-2025-1787

5.8 mediumEPSS 0.1%

Medium (5.8) in genetec genetec update service. EPSS 0.1% chance of exploitation in the next 30 days.

Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combined with CVE-2025-1789 to achieve low privilege escalation.

Severity

CVSS 4.0

5.8 medium

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/S:P/AU:N/V:C

CVSS 3.1

4.2 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
CWE: CWE-346
Published: 2026-02-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

genetec:genetec_update_service

References

https://techdocs.genetec.com/r/en-US/Security-Updates-for-GenetecTM-Update-Service-2.10/Resolved-vulnerabilities-in-Genetec-Update-Service-2.10

Check your stack JSON