What is CVE-2025-1787?

CVE-2025-1787 is a medium-severity vulnerability in Genetec Update Service, classified under Origin Validation Error. CVSS score: 4.2/10. Published 2026-02-24.

How severe is CVE-2025-1787?

Medium severity. CVSS v3 base score is 4.2 out of 10.

Vulnerability in Genetec Update Service

CVE-2025-1787

Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combined with CVE-2025-1789 to achieve low privilege escalation.

EPSS: 0.001 (0.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.2 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L.

Affected products

Genetec Genetec_update_service
Genetec Inc. Update Service — versions <2.10.600, >=2.10.600

Weakness classification (CWE)

CWE-346 — Origin Validation Error

References

security@genetec.com (Release Notes, Vendor Advisory)

Frequently asked questions

What is CVE-2025-1787?: CVE-2025-1787 is a medium-severity vulnerability in Genetec Update Service, classified under Origin Validation Error. CVSS score: 4.2/10. Published 2026-02-24.
How severe is CVE-2025-1787?: Medium severity. CVSS v3 base score is 4.2 out of 10.