CVE-2026-40619

Local OS Privileges Enable Extraction of Server Admin Credentials from Vulnerable Installation Packages

Published Jun 2, 2026 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Description

A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to access the Server Admin credentials. A third party hired by Genetec found the issue. There is currently no evidence of active exploitation.

This vulnerability is associated with specific installation package builds rather than the product version identifier alone. Certain versions (including 5.10.4.0, 5.11.3.0, 5.12.2.0 and 5.13.3.0) were released with both vulnerable and remediated installation packages under the same version number.

Consequently, version-based comparison alone is insufficient to determine exposure. Only installations performed using vulnerable builds are affected. Remediated builds can be distinguished using verified installation package hashes. For the complete list of fixed build hashes, refer to the security advisory section.

Analysis

Technical impact

A high‑severity flaw in Genetec Security Center main server installations permits an attacker who already has local OS privileges to retrieve Server Admin credentials. The weakness is tied to specific installation package builds rather than the product version number alone, and it effectively exposes privileged credentials that can be used to compromise the entire system. The vulnerability is classified as CWE‑532, indicating an issue with improper handling of sensitive information in the installation payload.

Affected Systems

Genetec Security Center main server installations, specifically versions 5.10.4.0, 5.11.3.0, 5.12.2.0, and 5.13.3.0. These releases contained both vulnerable and remediated installation packages under the same version identifier, so a purely version‑based check is insufficient to determine exposure.

Risk and Exploitability

The CVSS score of 7.8 indicates a moderate‑to‑high exploitation potential. The EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog, with no evidence of active exploitation. Because the attack requires local OS privileges, the threat is confined to environments where an attacker can gain such access, but once achieved, the attacker can obtain powerful credentials, potentially leading to full system compromise.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Genetec Inc.

Genetec Security Center

unaffected

Version	Status	Constraints
`>=5.7 SR6 <=5.10.4.0`	affected	—
`>5.10.4.0`	unaffected	—
`>=5.11.0.0 <=5.11.3.0`	affected	—
`>5.11.3.0`	unaffected	—
`>=5.12.0.0 <=5.12.2.0`	affected	—
`>5.12.2.0`	unaffected	—
`>=5.13.0.0 <=5.13.3.0`	affected	—
`>5.13.3.0`	unaffected	—
`>=5.14.0.0`	unaffected	—

No data.

Vendor Product Versions

Genetec

Security Center

Version	Status	Scheme	Platform
`[5.7 SR6,5.10.4.0]`	affected	generic	['windows']
`(5.10.4.0,*]`	unaffected	generic	['windows']
`[5.11.0.0,5.11.3.0]`	affected	generic	['windows']
`(5.11.3.0,*]`	unaffected	generic	['windows']
`[5.12.0.0,5.12.2.0]`	affected	generic	['windows']
`(5.12.2.0,*]`	unaffected	generic	['windows']
`[5.13.0.0,5.13.3.0]`	affected	generic	['windows']
`(5.13.3.0,*]`	unaffected	generic	['windows']
`[5.14.0.0,*]`	unaffected	generic	['windows']

Remediation

Vendor Solution

Updated installation packages have been released for affected versions of Security Center. Installations performed using remediated builds are not vulnerable. For versions that were distributed with both vulnerable and fixed installation packages under the same version number, the following hashes correspond to confirmed remediated builds: - Version 5.10.4.0 (4111.0): SHA1: A2133AB76ECA6988F23FCB83FFF95949E0738C07 - Version 5.11.3.0 (3130.13): SHA1: 9427F5AF127E00DF41CF44AC233976DF56604FFD - Version 5.12.2.0 (2181.44): SHA256: B9284E55EC54EBBC36265EA5DE1272B7752B2A29DDC44804D5459DFC21C16609 - Version 5.13.3.0 (3132.18): SHA256: 5E3B3C9D5A8C633489EFFF71D7883D4E2D89C28009CA2A1D0294FB3B19A79450 Customers should verify the integrity of their installation packages against these values to determine whether a fixed build is in use. If the package hash does not match a known remediated value, it should be considered vulnerable.

OpenCVE Recommended Actions

Verify the SHA‑1 or SHA‑256 hash of the installation package you used against the values listed in Genetec’s advisory to determine if the build is remediated.
If the hash does not match a known remediated value, download the fixed installer for the corresponding version from Genetec and redeploy the server using that build.
For future deployments, restrict installation packages to those with hashes that match the known remediated values and avoid using any packages whose hash fails verification.

Generated by OpenCVE AI on June 2, 2026 at 16:52 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.115% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://resources.genetec.com/security-advisories/vulnerability-affecting-security-center-systems-main-server-installations

History

Jun 3, 2026 2:30 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Genetec Genetec security Center
Vendors & Products		Genetec Genetec security Center

Jun 2, 2026 5:15 PM Title updated View changes

Type	Values Removed	Values Added
Title		Local OS Privileges Enable Extraction of Server Admin Credentials from Vulnerable Installation Packages

Jun 2, 2026 4:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Jun 2, 2026 3:45 PM Description updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to access the Server Admin credentials. A third party hired by Genetec found the issue. There is currently no evidence of active exploitation. This vulnerability is associated with specific installation package builds rather than the product version identifier alone. Certain versions (including 5.10.4.0, 5.11.3.0, 5.12.2.0 and 5.13.3.0) were released with both vulnerable and remediated installation packages under the same version number. Consequently, version-based comparison alone is insufficient to determine exposure. Only installations performed using vulnerable builds are affected. Remediated builds can be distinguished using verified installation package hashes. For the complete list of fixed build hashes, refer to the security advisory section.
Weaknesses		CWE-532
References		https://resources.genetec.com/security-advisories/vulnerability-affecting-security-center-systems-main-server-installations
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`