EUVD-2026-85917
GHSA-5gc2-2r8h-2q9q
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate with low-privilege account
-
ExploitCall Media Gateway API thumbnail endpoint
-
ExecutionBypass missing playback authorization check
-
ImpactRetrieve unauthorized video thumbnails
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization checks on every request
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires a valid authenticated Genetec Security Center account (PR:L) that has been explicitly denied playback/video-viewing privileges - the flaw lets that restricted account still invoke the Media Gateway API to generate video thumbnails. The limiting factors are that an account is needed (no unauthenticated access), the exposure is bounded to thumbnail imagery rather than full video streams, and the fix is present in Security Center 5.14.1.2. No special non-default configuration or user interaction is indicated. |
| Impact | This is a genuine but modest-severity authorization flaw, not a top-tier priority. The CVSS 3.1 base score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - network-reachable, low-complexity, but requiring an authenticated account (PR:L). No integrity or availability impact. The signals are consistent and point to low real-world urgency: no EPSS score is provided, there is no CISA KEV listing, and no public exploit code has been identified. CISA's SSVC framing reinforces this - Exploitation: none, Automatable: no, Technical Impact: partial. There is a notable internal tension: the vendor/NVD rated Confidentiality as C:H, yet the described impact is merely the ability to generate video thumbnails, and SSVC labels the technical impact only 'partial.' Thumbnails are low-resolution partial views of footage, so C:H appears aggressive; a C:L rating (yielding ~4.3) is more defensible and aligns with the SSVC 'partial' judgment. This is a real, vendor-confirmed access-control gap worth patching, but it is a low-likelihood, bounded-impact issue rather than an emergency. |
| Exploit ScenarioDerived | A low-privileged but authenticated Security Center user - one explicitly denied playback rights - sends a crafted request to the Media Gateway API endpoint that returns video thumbnails, and receives thumbnail imagery of surveillance video they should not be able to view. Because attack complexity is low and no user interaction is needed, any holder of a restricted account can repeat this to sample footage across cameras. No public exploit code is known, and there is no evidence of active exploitation. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 24, 2026
An authorization bypass in the Media Gateway API of Genetec Security Center lets an authenticated account that has been explicitly denied playback and video-viewing privileges still generate video thumbnails, exposing a limited slice of video imagery to users who should not see it. The flaw is reachable remotely by any account holding valid credentials (CVSS vector shows PR:L, so authentication is required), but the exposure is bounded to thumbnail frames rather than full live or recorded streams, and it requires no user interaction and no special non-default configuration. No public exploit code has been identified at time of analysis, CISA's SSVC assessment rates exploitation as none, and the issue is resolved in Security Center 5.14.1.2, making this a genuine but modest-severity authorization defect rather than a top-tier priority.
RemediationAI
Upgrade to Genetec Security Center 5.14.1.2, which contains the vendor's fix for this missing-authorization condition in the Media Gateway API; refer to the vendor advisory at https://techdocs.genetec.com/r/en-US/Security-Updates-for-Security-Center-5.14/Resolved-vulnerabilities-in-Security-Center-5.14.1.2 for the exact build and deployment guidance. Where immediate upgrade is not possible, compensating controls should target the API surface directly: restrict network reachability of the Media Gateway service so only trusted management subnets and clients can reach it (trade-off: remote and federated clients outside those subnets lose media functionality until re-scoped), audit and tighten Security Center account roles so accounts without a legitimate video-viewing need are not provisioned in the first place (trade-off: administrative overhead and possible disruption to shared/service accounts), and monitor Media Gateway logs for thumbnail-generation requests originating from accounts with no playback rights (trade-off: detection only, no prevention, and log volumes can be high in large camera estates). Note that disabling thumbnail generation globally is not supported as a granular toggle and would degrade video wall and client preview features, so it is not recommended as a primary mitigation.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The issue is a missing-authorization defect (CWE-862) in the Media Gateway API component of Genetec Security Center, a physical security platform that unifies video surveillance, access control, and related subsystems. The Media Gateway exposes programmatic endpoints that broker media operations - including thumbnail generation from camera video - on behalf of authenticated Security Center accounts. The root cause is that the thumbnail-generation path does not enforce the same playback/privilege checks applied to normal video retrieval, so an account whose playback privileges have been revoked or never granted can still ask the API to render thumbnail images. The affected product is captured by the CPE cpe:2.3:a:genetec_inc.:genetec_security_center:*:*:*:*:*:*:*:*, i.e. Security Center builds prior to the 5.14.1.2 fix. Impact is confidentiality-only and partial in scope: the bypass yields still thumbnail imagery rather than continuous video, which is why the vendor's 6.5 base score (C:H) is assessed more conservatively here as C:L.
Know when Genetec Security Center gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Authenticated low-priv user (PR:L) over the network gains only thumbnail imagery, a partial confidentiality leak (C:L, matching SSVC 'partial'), with no integrity or availability impact.
Primary rating from Vendor (Genetec).
CVSS VectorVendor: Genetec
Lifecycle Timeline
1DescriptionCVE.org
A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
More in Genetec Security Center
View allLocal credential exposure in Genetec Security Center main server installations allows an attacker with local OS privileg
Unauthenticated video stream access in Genetec Security Center 5.14.0.0 (builds prior to 5.14.178.18) lets remote attack
SQL injection in Genetec Security Center's Access Manager role enables a remote attacker with high privileges to achieve
Exploit-DB