CVE-2026-40619

State: Published
Severity: 7.8 High
Published: Jun 2, 2026
Updated: Jul 31, 2026
Reserved: Apr 27, 2026

Description

A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to access the Server Admin credentials. A third party hired by Genetec found the issue. There is currently no evidence of active exploitation.

This vulnerability is associated with specific installation package builds rather than the product version identifier alone. Certain versions (including 5.10.4.0, 5.11.3.0, 5.12.2.0 and 5.13.3.0) were released with both vulnerable and remediated installation packages under the same version number.

Consequently, version-based comparison alone is insufficient to determine exposure. Only installations performed using vulnerable builds are affected. Remediated builds can be distinguished using verified installation package hashes. For the complete list of fixed build hashes, refer to the security advisory section.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Genetec

Weaknesses

CWE-532 Insertion of Sensitive Information into Log File

Affected Products

Product	Versions
Genetec Security CenterGenetec Inc.	>=5.7 SR6 <=5.10.4.0Affected >5.10.4.0Not affected >=5.11.0.0 <=5.11.3.0Affected >5.11.3.0Not affected >=5.12.0.0 <=5.12.2.0Affected >5.12.2.0Not affected >=5.13.0.0 <=5.13.3.0Affected >5.13.3.0Not affected >=5.14.0.0Not affected

References

https://resources.genetec.com/security-advisories/vulnerability-affecting-security-center-systems-main-server-installations

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.