CVE-2026-65422
MediumCVSS 6.5Summary
A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails.
Risk Assessment
A user without proper privileges may access video content by generating thumbnails, violating access control.
Recommendation
Update Genetec Security Center to a version that includes the authorization fix for Media Gateway API.
Other vulnerabilities in Genetec Security Center
See all- CVE-2026-55727High
A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14.0.0 prior to build 5.14.178.18 may allow an unauthenticated attacker to access live video streams.
- CVE-2026-40619High
A high severity vulnerability in Security Center main server allows a local attacker with OS privileges to access Server Admin credentials. The issue is associated with specific installation builds rather than just the product version.
Original NVD description (English source)
A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails.