CVE-2025-1787: Medium severity Genetec Genetec Update Service vulnerability
Published Feb 24, 2026
·Updated
Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combined with CVE-2025-1789 to achieve low privilege escalation.
Affected Software
2 affected components
Genetec Genetec Update Service
Genetec Genetec Update Service<2.10.6
Remediation
Information
This issue is fixed in Genetec Update Service 2.10.600 and all later versions. Internet connected Genetec Update Service will automatically update themselves.
Event History
Feb 24, 2026
CVE Published
via MITRE·06:44 PM
Data Sourced
via MITRE·06:44 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·08:27 PM
DescriptionSeverityWeaknessAffected Software