What’s Vulnerable › Vulnerabilities

CVE-2025-1789

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-24 · updated 2026-06-17
• Weakness: CWE-276

Description

Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system.

Affected products

• Genetec Inc. Genetec Update Service: before 2.10.6 — fixed in 2.10.6

How to fix

Upgrade to a fixed version: Genetec Inc. Genetec Update Service 2.10.6. Check the vendor advisory for mitigations.

References

• https://techdocs.genetec.com/r/en-US/Security-Updates-for-GenetecTM-Update-Service-2.10/Resolved-vulnerabilities-in-Genetec-Update-Service-2.10

Get alerted when CVE-2025-1789 or the next vulnerability affects your stack