CVE-2026-25112 - Vulnerability Details - OpenCVE

A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products

References

Link	Providers
https://resources.genetec.com/security-advisories/vulnerability-affecting-rabbitmq-deployment-in-genetec-products
https://ressources.genetec.com/bulletins-de-securite/vulnerabilite-d-elevation-de-privileges-affectant-le-deploiement-de-rabbitmq-dans-les-produits-genetec

History

Tue, 26 May 2026 17:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 26 May 2026 16:45:00 +0000

Type	Values Removed	Values Added
Title		Privilege Escalation via Misconfigured RabbitMQ Deployment in Genetec Products

Tue, 26 May 2026 15:45:00 +0000

Type	Values Removed	Values Added
Description		A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.
Weaknesses		CWE-732
References		https://resources.genetec.com/security-advisories/vulnerability-affecting-rabbitmq-deployment-in-genetec-products https://ressources.genetec.com/bulletins-de-securite/vulnerabilite-d-elevation-de-privileges-affectant-le-deploiement-de-rabbitmq-dans-les-produits-genetec
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: Genetec

Published: 2026-05-26T14:52:37.064Z

Updated: 2026-05-26T15:50:38.937Z

Reserved: 2026-03-04T16:30:34.092Z

Link: CVE-2026-25112

Vulnrichment

Updated: 2026-05-26T15:50:35.613Z

NVD

Status : Received

Published: 2026-05-26T16:16:22.977

Modified: 2026-05-26T16:16:22.977

Link: CVE-2026-25112

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-05-26T16:30:10Z

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-25112", "assignerOrgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8", "state": "PUBLISHED", "assignerShortName": "Genetec", "dateReserved": "2026-03-04T16:30:34.092Z", "datePublished": "2026-05-26T14:52:37.064Z", "dateUpdated": "2026-05-26T15:50:38.937Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8", "shortName": "Genetec", "dateUpdated": "2026-05-26T14:52:37.064Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-732", "description": "CWE-732 The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-642", "descriptions": [{"lang": "en", "value": "CAPEC-642: Replace Binaries"}]}], "affected": [{"vendor": "Genetec Inc.", "product": "Genetec RabbitMQ", "platforms": ["Windows"], "versions": [{"status": "affected", "versionType": "semver", "version": "<3.13.7.19"}, {"status": "unaffected", "versionType": "semver", "version": ">=3.13.7.19"}], "defaultStatus": "unaffected"}, {"vendor": "Genetec Inc.", "product": "Genetec Mission Control", "platforms": ["Windows"], "versions": [{"status": "affected", "versionType": "semver", "version": "<3.4.1.0"}, {"status": "unaffected", "versionType": "semver", "version": ">=3.4.1.0"}], "defaultStatus": "unaffected"}, {"vendor": "Genetec Inc.", "product": "Genetec Sipelia", "platforms": ["Windows"], "versions": [{"status": "affected", "versionType": "semver", "version": "<2.11"}, {"status": "unaffected", "versionType": "semver", "version": ">=2.11"}], "defaultStatus": "unaffected"}, {"vendor": "Genetec Inc.", "product": "Genetec Industrial IoT", "platforms": ["Windows"], "versions": [{"status": "affected", "versionType": "semver", "version": "<5.5.118.0"}, {"status": "unaffected", "versionType": "semver", "version": ">=5.5.118.0"}, {"status": "affected", "versionType": "semver", "version": "<6.0.196.0"}, {"status": "unaffected", "versionType": "semver", "version": ">=6.0.196.0"}], "defaultStatus": "unaffected"}, {"vendor": "Genetec Inc.", "product": "Genetec Airport Operational Manager", "platforms": ["Windows"], "versions": [{"status": "affected", "versionType": "semver", "version": "<1.6"}, {"status": "unaffected", "versionType": "semver", "version": ">=1.6"}], "defaultStatus": "unaffected"}, {"vendor": "Genetec Inc.", "product": "Genetec Restricted Security Area", "platforms": ["Windows"], "versions": [{"status": "affected", "versionType": "semver", "version": "<5.2.1"}, {"status": "unaffected", "versionType": "semver", "version": ">=5.2.1"}], "defaultStatus": "unaffected"}, {"vendor": "Genetec Inc.", "product": "Genetec Inter-System Gateway", "platforms": ["Windows"], "versions": [{"status": "affected", "versionType": "semver", "version": "<1.2"}, {"status": "unaffected", "versionType": "semver", "version": ">=1.2"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack."}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"url": "https://resources.genetec.com/security-advisories/vulnerability-affecting-rabbitmq-deployment-in-genetec-products"}, {"url": "https://ressources.genetec.com/bulletins-de-securite/vulnerabilite-d-elevation-de-privileges-affectant-le-deploiement-de-rabbitmq-dans-les-produits-genetec"}], "credits": [{"lang": "en", "type": "finder", "value": "Johannes Kruchem & Christian Hager from SEC Consult Vulnerability Lab."}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-26T15:50:33.121101Z", "id": "CVE-2026-25112", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-26T15:50:38.937Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-25112", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-05-26T15:50:33.121101Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-26T15:50:35.613Z"}}], "cna": {"credits": [{"lang": "en", "type": "finder", "value": "Johannes Kruchem & Christian Hager from SEC Consult Vulnerability Lab."}], "impacts": [{"capecId": "CAPEC-642", "descriptions": [{"lang": "en", "value": "CAPEC-642: Replace Binaries"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Genetec Inc.", "product": "Genetec RabbitMQ", "versions": [{"status": "affected", "version": "<3.13.7.19", "versionType": "semver"}, {"status": "unaffected", "version": ">=3.13.7.19", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "Genetec Inc.", "product": "Genetec Mission Control", "versions": [{"status": "affected", "version": "<3.4.1.0", "versionType": "semver"}, {"status": "unaffected", "version": ">=3.4.1.0", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "Genetec Inc.", "product": "Genetec Sipelia", "versions": [{"status": "affected", "version": "<2.11", "versionType": "semver"}, {"status": "unaffected", "version": ">=2.11", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "Genetec Inc.", "product": "Genetec Industrial IoT", "versions": [{"status": "affected", "version": "<5.5.118.0", "versionType": "semver"}, {"status": "unaffected", "version": ">=5.5.118.0", "versionType": "semver"}, {"status": "affected", "version": "<6.0.196.0", "versionType": "semver"}, {"status": "unaffected", "version": ">=6.0.196.0", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "Genetec Inc.", "product": "Genetec Airport Operational Manager", "versions": [{"status": "affected", "version": "<1.6", "versionType": "semver"}, {"status": "unaffected", "version": ">=1.6", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "Genetec Inc.", "product": "Genetec Restricted Security Area", "versions": [{"status": "affected", "version": "<5.2.1", "versionType": "semver"}, {"status": "unaffected", "version": ">=5.2.1", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "Genetec Inc.", "product": "Genetec Inter-System Gateway", "versions": [{"status": "affected", "version": "<1.2", "versionType": "semver"}, {"status": "unaffected", "version": ">=1.2", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "references": [{"url": "https://resources.genetec.com/security-advisories/vulnerability-affecting-rabbitmq-deployment-in-genetec-products"}, {"url": "https://ressources.genetec.com/bulletins-de-securite/vulnerabilite-d-elevation-de-privileges-affectant-le-deploiement-de-rabbitmq-dans-les-produits-genetec"}], "descriptions": [{"lang": "en", "value": "A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-732", "description": "CWE-732 The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors."}]}], "providerMetadata": {"orgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8", "shortName": "Genetec", "dateUpdated": "2026-05-26T14:52:37.064Z"}}}, "cveMetadata": {"cveId": "CVE-2026-25112", "state": "PUBLISHED", "dateUpdated": "2026-05-26T15:50:38.937Z", "dateReserved": "2026-03-04T16:30:34.092Z", "assignerOrgId": "f2b06212-cb4b-41a4-9501-fa2e367495b8", "datePublished": "2026-05-26T14:52:37.064Z", "assignerShortName": "Genetec"}, "dataVersion": "5.2"}