Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-25112

A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:03c405420ae3549f6cfb503e107f6967c83e100526fee2ec5899edf69e3830a8
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 7 assertions

{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec Industrial IoT","vendor":"Genetec Inc.","versions":[{"status":"affected","version":"<5.5.118.0","versionType":"semver"},{"status":"unaffected","version":">=5.5.118.0","versionType":"semver"},{"status":"affected","version":"<6.0.196.0","versionType":"semver"},{"status":"unaffected","version":">=6.0.196.0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/affected/3

{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec Inter-System Gateway","vendor":"Genetec Inc.","versions":[{"status":"affected","version":"<1.2","versionType":"semver"},{"status":"unaffected","version":">=1.2","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/affected/6

{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec RabbitMQ","vendor":"Genetec Inc.","versions":[{"status":"affected","version":"<3.13.7.19","versionType":"semver"},{"status":"unaffected","version":">=3.13.7.19","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/affected/0

{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec Sipelia","vendor":"Genetec Inc.","versions":[{"status":"affected","version":"<2.11","versionType":"semver"},{"status":"unaffected","version":">=2.11","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/affected/2

{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec Restricted Security Area","vendor":"Genetec Inc.","versions":[{"status":"affected","version":"<5.2.1","versionType":"semver"},{"status":"unaffected","version":">=5.2.1","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/affected/5

{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec Mission Control","vendor":"Genetec Inc.","versions":[{"status":"affected","version":"<3.4.1.0","versionType":"semver"},{"status":"unaffected","version":">=3.4.1.0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/affected/1

{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec Airport Operational Manager","vendor":"Genetec Inc.","versions":[{"status":"affected","version":"<1.6","versionType":"semver"},{"status":"unaffected","version":">=1.6","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/affected/4

Affected products and versions

7 source assertions
{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec Industrial IoT","vendor":"Genetec Inc.","versions":[{"status":"affected","version":"<5.5.118.0","versionType":"semver"},{"status":"unaffected","version":">=5.5.118.0","versionType":"semver"},{"status":"affected","version":"<6.0.196.0","versionType":"semver"},{"status":"unaffected","version":">=6.0.196.0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/affected/3
{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec Inter-System Gateway","vendor":"Genetec Inc.","versions":[{"status":"affected","version":"<1.2","versionType":"semver"},{"status":"unaffected","version":">=1.2","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/affected/6
{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec RabbitMQ","vendor":"Genetec Inc.","versions":[{"status":"affected","version":"<3.13.7.19","versionType":"semver"},{"status":"unaffected","version":">=3.13.7.19","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/affected/0
{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec Sipelia","vendor":"Genetec Inc.","versions":[{"status":"affected","version":"<2.11","versionType":"semver"},{"status":"unaffected","version":">=2.11","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/affected/2
{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec Restricted Security Area","vendor":"Genetec Inc.","versions":[{"status":"affected","version":"<5.2.1","versionType":"semver"},{"status":"unaffected","version":">=5.2.1","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/affected/5
{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec Mission Control","vendor":"Genetec Inc.","versions":[{"status":"affected","version":"<3.4.1.0","versionType":"semver"},{"status":"unaffected","version":">=3.4.1.0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/affected/1
{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec Airport Operational Manager","vendor":"Genetec Inc.","versions":[{"status":"affected","version":"<1.6","versionType":"semver"},{"status":"unaffected","version":">=1.6","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/affected/4

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-732","description":"CWE-732 The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions
{"url":"http://seclists.org/fulldisclosure/2026/Jun/2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/adp/1/references/0
{"url":"https://resources.genetec.com/security-advisories/vulnerability-affecting-rabbitmq-deployment-in-genetec-products"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/references/0
{"url":"https://ressources.genetec.com/bulletins-de-securite/vulnerabilite-d-elevation-de-privileges-affectant-le-deploiement-de-rabbitmq-dans-les-produits-genetec"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:35b1e8dc453c2113e0e1877770a5e6c6951c26d0b17f9d4adf2edf01c3f9c83a · sha256:f86d561993496a67… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer