What’s Vulnerable › Vulnerabilities

CVE-2026-27768

• Severity: medium (CVSS 6.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-25 · updated 2026-07-24
• Weakness: CWE-89

Description

SQL Injection affecting the Access Manager role.

Affected products

• Genetec Inc. Genetec Security Center: through 5.9.5.11; through 5.10.4.31; through 5.11.3.28; from 5.12.0.0 <5.12.2.17; from 5.13.0.0 <5.13.3.5 — fixed in 5.12.2.17, 5.13.3.5

How to fix

Upgrade to a fixed version: Genetec Inc. Genetec Security Center 5.12.2.17, 5.13.3.5. Check the vendor advisory for mitigations.

References

• https://techdocs.genetec.com/r/en-US/Security-Updates-for-Security-Center-5.12/Resolved-vulnerabilities-in-Security-Center-5.12.2.17
• https://techdocs.genetec.com/r/en-US/Security-Updates-for-Security-Center-5.13/Resolved-vulnerabilities-in-Security-Center-5.13.3.5
• https://techdocs.genetec.com/r/fr-FR/Mises-a-jour-de-securite-pour-Security-Center-5.12/Vulnerabilites-resolues-dans-Security-Center-5.12.2.17

Get alerted when CVE-2026-27768 or the next vulnerability affects your stack