CVE-2025-1787CWE-346

Local admin could to leak information from the Genetec Update Service configuration web page

Medium · published February 24, 2026

CVSS v4.0
5.8
EPSS
0%
Percentile
0.8
In the wild
Unconfirmed
What it is

Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combined with CVE-2025-1789 to achieve low privilege escalation.

The record
Technical detail
CVSS v4.0
5.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:H/IR:H/AR:H/MVC:H/MVI:H/MVA:H/MSI:H/MSA:H/S:P/AU:N/V:C
EPSS
0.00100 · 0.8th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2026-02-24T18:44Z
EPSS history
Timeline
  • 24 FEB 18:44Z
    Local admin could to leak information from the Genetec Update Service configuration web page
    cvelistv5