CVE Explorer
CVE-2026-40619
A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to access the Server Admin credentials. A third party hired by Genetec found the issue. There is currently no evidence of active exploitation.
This vulnerability is associated with specific installation package builds rather than the product version identifier alone. Certain versions (including 5.10.4.0, 5.11.3.0, 5.12.2.0
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Genetec Security Center","vendor":"Genetec Inc.","versions":[{"status":"affected","version":">=5.7 SR6 <=5.10.4.0","versionType":"semver"},{"status":"unaffected","version":">5.10.4.0","versionType":"semver"},{"status":"affected","version":">=5.11.0.0 <=5.11.3.0","versionType":"semver"},{"status":"unaffected","version":">5.11.3.0","versionType":"semver"},{"status":"affected","version":">=5.12.0.0 <=5.12.2.0","versionType":"semver"},{"status":"unaffected","version":">5.12.2.0","versionType":"semver"},{"status":"affected","version":…
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:af42e0feaa69a67380951761c1c463640aac7682ee4236a9dd9cd8f108b1e6f9 · sha256:e22d1660ef3a56ae… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:af42e0feaa69a67380951761c1c463640aac7682ee4236a9dd9cd8f108b1e6f9 · sha256:e22d1660ef3a56ae… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-532","description":"CWE-532: Insertion of Sensitive Information into Log File","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:af42e0feaa69a67380951761c1c463640aac7682ee4236a9dd9cd8f108b1e6f9 · sha256:e22d1660ef3a56ae… · /containers/cna/problemTypes/0/descriptions/0
Source references
1 source assertion{"url":"https://resources.genetec.com/security-advisories/vulnerability-affecting-security-center-systems-main-server-installations"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:af42e0feaa69a67380951761c1c463640aac7682ee4236a9dd9cd8f108b1e6f9 · sha256:e22d1660ef3a56ae… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.