Vulnerability · Published May 26, 2026 · Assigned by Genetec
CVE-2026-25112
High 7.8
In plain English
A high-severity incorrect permission assignment in Genetec Airport Operational Manager from Genetec Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 96.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Genetec Inc. | Genetec RabbitMQ | <3.13.7.19 |
| Genetec Inc. | Genetec Mission Control | <3.4.1.0 |
| Genetec Inc. | Genetec Sipelia | <2.11 |
| Genetec Inc. | Genetec Industrial IoT | <5.5.118.0<6.0.196.0 |
| Genetec Inc. | Genetec Airport Operational Manager | <1.6 |
| Genetec Inc. | Genetec Restricted Security Area | <5.2.1 |
| Genetec Inc. | Genetec Inter-System Gateway | <1.2 |
Weakness: CWE-732 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://resources.genetec.com/security-advisories/vulnerability-affecting-rabbitmq-deployment-in-genetec-products
- https://ressources.genetec.com/bulletins-de-securite/vulnerabilite-d-elevation-de-privileges-affectant-le-deploiement-de-rabbitmq-dans-les-produits-genetec
- http://seclists.org/fulldisclosure/2026/Jun/2