Genetec vulnerabilities
We track 6 vulnerabilities in Genetec products across 4 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on August 28, 2026.
Latest Genetec vulnerabilities
- 7.9 High severity
Synergis Softwire: Insecure Storage of Sensitive Information
Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances (SV-100E and SV-300E series) and Synergis Softwire installed on Windows servers.
- 7.5 High severity
Genetec Security Center: Improper Authentication
A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14.0.0 prior to build 5.14.178.18 may allow an unauthenticated attacker to access live video streams.
- 7.8 High severity
Genetec Security Center: Insertion of Sensitive Information into Log File
A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to access the Server Admin credentials. A third party hired by Genetec found the issue
- 7.8 High severity
Genetec Update Service: Incorrect Default Permissions
Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system.
- 9.8 Critical severity
Genetec Security Center: Improper Access Control
A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to the Genetec Security Center system. The Genetec engineering team discovered this issue internally. The
- 8.0 High severity
Genetec Security Center: Use of Externally-Controlled Input to Select Classes or Code
A high-severity vulnerability that can lead to arbitrary code execution on the system hosting the Web SDK role was found in the Genetec Security Center product line.