CVE-2026-25112: Genetec RabbitMQ privilege escalation in multiple products

CVE-2026-25112 · Severity: high · CVSS 7.8 · Published 2026-05-26

A security vulnerability exists in how Genetec products deploy RabbitMQ, a messaging component used for communication between different parts of the security system. If an attacker has local access to the server, they could exploit incorrect file permissions to gain administrative control over the machine. This could lead to unauthorized access to security data, service disruptions, or full system compromise.

Vendors: Genetec.

Quick answers

Is CVE-2026-25112 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-25112 being exploited in the wild.
How severe is CVE-2026-25112?
High severity, with a CVSS score of 7.8, published 26 May 2026.
Which products and versions are affected?
Genetec Airport Operational Manager 1.6 and earlier; Genetec Industrial IoT 5.5.118.0 and earlier; Genetec Mission Control 3.4.1.0 and earlier; Genetec RabbitMQ 3.13.7.3 and earlier; and 1 more.
Is there a fix for CVE-2026-25112?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-25112 attacked?
It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-25112?
Check whether you run Genetec Airport Operational Manager, Genetec Industrial IoT, Genetec Inter-System Gateway or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is classified as an incorrect permission assignment (CWE-732) within the RabbitMQ deployment used by various Genetec products. RabbitMQ relies on a diagnostic utility that, if replaced or shadowed by an untrusted component in a specific directory (ProgramData\Genetec\RabbitMQ), will execute that component with the elevated privileges of the RabbitMQ service. An attacker with local access and low-level privileges can exploit this to achieve full system authority. The issue affects Genetec-provided RabbitMQ versions 3.13.7.3 and earlier. A mitigation utility is available for existing deployments, and version 3.13.7.19 provides a permanent fix.

Affected products

  • Genetec RabbitMQ 3.13.7.3 and earlier
  • Genetec Mission Control 3.4.1.0 and earlier
  • Genetec Industrial IoT (IIoT) 5.x 5.5.118.0 and earlier
  • Genetec Industrial IoT (IIoT) 6.x 6.0.196.0 and earlier
  • Genetec Airport Operational Manager (AOM) 1.6 and earlier
  • Genetec Restricted Security Area (RSA) Surveillance 5.2.1 and earlier
  • Genetec Inter-System (IS) Gateway 1.2 and earlier
  • Genetec Sipelia 2.11 and earlier

Timeline

  • 2026-05-25: advisory: Genetec published the security advisory.
  • 2026-05-26: disclosed: CVE-2026-25112 published to NVD.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.