CVE-2026-65422

Summary

A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails.

Affected Software

VendorProductVersion RangeStatus
Genetec Inc.Genetec Security Center<5.12.2.22affected
Genetec Inc.Genetec Security Center>=5.12.2.22unaffected
Genetec Inc.Genetec Security Center<5.13.3.9affected
Genetec Inc.Genetec Security Center>=5.13.3.9unaffected
Genetec Inc.Genetec Security Center<5.14.1.2affected
Genetec Inc.Genetec Security Center>=5.14.1.2unaffected
Genetec Inc.Genetec Security Center>=5.14.2.0unaffected

Weaknesses

  • CWE-862: CWE-862: Missing Authorization

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References