{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-65422","assignerOrgId":"f2b06212-cb4b-41a4-9501-fa2e367495b8","state":"PUBLISHED","assignerShortName":"Genetec","dateReserved":"2026-08-05T13:27:22.767Z","datePublished":"2026-09-24T14:39:03.660Z","dateUpdated":"2026-09-24T14:54:24.126Z"},"containers":{"cna":{"providerMetadata":{"orgId":"f2b06212-cb4b-41a4-9501-fa2e367495b8","shortName":"Genetec","dateUpdated":"2026-09-24T14:39:03.660Z"},"problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-862","description":"CWE-862: Missing Authorization","type":"CWE"}]}],"impacts":[{"capecId":"CAPEC-122","descriptions":[{"lang":"en","value":"CAPEC-122: Privilege Abuse"}]}],"affected":[{"vendor":"Genetec Inc.","product":"Genetec Security Center","platforms":["Windows"],"versions":[{"status":"affected","versionType":"semver","version":"<5.12.2.22"},{"status":"unaffected","versionType":"semver","version":">=5.12.2.22"},{"status":"affected","versionType":"semver","version":"<5.13.3.9"},{"status":"unaffected","versionType":"semver","version":">=5.13.3.9"},{"status":"affected","versionType":"semver","version":"<5.14.1.2"},{"status":"unaffected","versionType":"semver","version":">=5.14.1.2"},{"status":"unaffected","versionType":"semver","version":">=5.14.2.0"}],"defaultStatus":"unaffected"}],"descriptions":[{"lang":"en","value":"A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails."}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}}],"references":[{"url":"https://techdocs.genetec.com/r/en-US/Security-Updates-for-Security-Center-5.14/Resolved-vulnerabilities-in-Security-Center-5.14.1.2"}],"credits":[{"lang":"en","type":"finder","value":"Sirak Tsegaye (Rok$i), Yeabsira Tesfaye (Xenon), Information Network Security Administration (INSA)"}]},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-24T14:54:16.470446Z","id":"CVE-2026-65422","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T14:54:24.126Z"}}]}}