What’s Vulnerable › Vulnerabilities

CVE-2026-25112

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-26 · updated 2026-07-24
• Weakness: CWE-732

Description

A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.

Affected products

• Genetec Inc. Genetec Airport Operational Manager: before 1.6 — fixed in 1.6
• Genetec Inc. Genetec Industrial IoT: before 5.5.118.0; before 6.0.196.0 — fixed in 5.5.118.0, 6.0.196.0
• Genetec Inc. Genetec Inter-System Gateway: before 1.2 — fixed in 1.2
• Genetec Inc. Genetec Mission Control: before 3.4.1.0 — fixed in 3.4.1.0
• Genetec Inc. Genetec RabbitMQ: before 3.13.7.19 — fixed in 3.13.7.19
• Genetec Inc. Genetec Restricted Security Area: before 5.2.1 — fixed in 5.2.1
• Genetec Inc. Genetec Sipelia: before 2.11 — fixed in 2.11

How to fix

Upgrade to a fixed version: Genetec Inc. Genetec Airport Operational Manager 1.6; Genetec Inc. Genetec Industrial IoT 5.5.118.0, 6.0.196.0; Genetec Inc. Genetec Inter-System Gateway 1.2; Genetec Inc. Genetec Mission Control 3.4.1.0; Genetec Inc. Genetec RabbitMQ 3.13.7.19; Genetec Inc. Genetec Restricted Security Area 5.2.1; Genetec Inc. Genetec Sipelia 2.11. Check the vendor advisory for mitigations.

References

• https://resources.genetec.com/security-advisories/vulnerability-affecting-rabbitmq-deployment-in-genetec-products
• https://ressources.genetec.com/bulletins-de-securite/vulnerabilite-d-elevation-de-privileges-affectant-le-deploiement-de-rabbitmq-dans-les-produits-genetec
• http://seclists.org/fulldisclosure/2026/Jun/2

Get alerted when CVE-2026-25112 or the next vulnerability affects your stack