CVE-2026-65422
Received Received - Intake

Authorization Bypass in Genetec Security Center Media Gateway API

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: Genetec Inc.

Description
A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-65422
EUVD
EUVD-2026-85917

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
genetec security_center *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails.

Impact Analysis

An attacker with limited access could exploit this to view video thumbnails without proper authorization, potentially exposing sensitive visual data.

Compliance Impact

This vulnerability could lead to unauthorized access to visual data, violating privacy requirements under GDPR and HIPAA, potentially resulting in legal and compliance penalties.

Mitigation Strategies

Update Genetec Security Center to the latest version to patch the authorization flaw in Media Gateway API. Review user privileges to ensure only authorized users can generate video thumbnails. Monitor system logs for unusual thumbnail generation requests.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65422. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart