CVE-2025-1787

MEDIUM 4.2CVE-2025-1787 · Published 24/02/2026 · updated 17/06/2026

In short

CVE-2025-1787 is a MEDIUM (CVSS 4.2) vulnerability affecting genetec update service (genetec).
Chance of exploitation in the next 30 days (EPSS): 0.10%, higher than 0.86% of all vulnerabilities.
Fix: update to 2.10.6 or later.

Package	Affected versions	Patched versions
genetec update service genetec	`< 2.10.6`	`2.10.6`

Description

Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combined with CVE-2025-1789 to achieve low privilege escalation.

References

techdocs.genetec.com/r/en-US/Security-Updates-for-GenetecTM-Update-Service-2.10/Resolved-vulnerabilities-in-Genetec-Update-Service-2.10 · Release Notes

More vulnerabilities in genetec update service

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free