CVE-2026-65422

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-24 · updated 2026-09-24
Weakness: CWE-862

Description

A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails.

Affected products

Genetec Inc. Genetec Security Center: before 5.12.2.22; before 5.13.3.9; before 5.14.1.2 — fixed in 5.12.2.22, 5.13.3.9, 5.14.1.2, 5.14.2.0

How to fix

Upgrade to a fixed version: Genetec Inc. Genetec Security Center 5.12.2.22, 5.13.3.9, 5.14.1.2, 5.14.2.0. Check the vendor advisory for mitigations.

References

https://techdocs.genetec.com/r/en-US/Security-Updates-for-Security-Center-5.14/Resolved-vulnerabilities-in-Security-Center-5.14.1.2

Get alerted when CVE-2026-65422 or the next vulnerability affects your stack