CVE-2026-27768

EUVD-2026-31705
SQL Injection affecting the Access Manager role.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
GenetecCNA
6.6 MEDIUM
NETWORK
HIGH
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
genetecsecurity_center
𝑥
≤ 5.9.5.11
CNA
genetecsecurity_center
𝑥
≤ 5.10.4.31
CNA
genetecsecurity_center
𝑥
≤ 5.11.3.28
CNA
Common Weakness Enumeration
References
https://techdocs.genetec.com/r/en-US/Security-Updates-for-Security-Center-5.12/Resolved-vulnerabilities-in-Security-Center-5.12.2.17
https://techdocs.genetec.com/r/en-US/Security-Updates-for-Security-Center-5.13/Resolved-vulnerabilities-in-Security-Center-5.13.3.5
https://techdocs.genetec.com/r/fr-FR/Mises-a-jour-de-securite-pour-Security-Center-5.12/Vulnerabilites-resolues-dans-Security-Center-5.12.2.17