PT-2026-21781 · Genetech · Genetec Update Service

Rutger Flohil · Published 2026-02-24 · Updated 2026-02-25 · CVE-2025-1787

Positive Technologies (AI Summary)

CVSS v4.0

5.8

Medium

Base vector

AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:X/V:C/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Genetec Update Service (affected versions not specified)

Description A local administrator may be able to obtain information from the Genetec Update Service configuration web page. An authenticated Windows user with administrator privileges could exploit this to gain elevated privileges within the Genetec Update Service. This issue could potentially be combined with another issue to achieve low privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2025-1787

Affected Products

Genetec Update Service

References · 4

• https://techdocs.genetec.com/r/en-US/Security-Updates-for-GenetecTM-Update-Service-2.10/Resolved-vulnerabilities-in-Genetec-Update-Service-2.10 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-1787 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1787 · Security Note
• https://twitter.com/CVEnew/status/2026676433305874543 · Twitter Post