CVE-2025-1789

HIGH

Genetec Update Service - Privilege Escalation

Title source: llm

Description

Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system.

References (1)

[Various Sources] https://techdocs.genetec.com/r/en-US/Security-Updates-for-GenetecTM-Update-Service-2.10/Resolved-vulnerabilities-in-Genetec-Update-Service-2.10

Scores

CVSS v3 7.8

EPSS 0.0001

EPSS Percentile 1.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-276

Status published

Affected Products (1)

genetec/genetec_update_service < 2.10.6

Timeline

Published Feb 24, 2026

Tracked Since Feb 25, 2026