# CVE-2026-40619: Genetec Security Center information disclosure in installation logs

Source: https://junglewise.ai/threats/cve-2026-40619-genetec-security-center-information-disclosure-in-installation  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-02. Updated: 2026-06-02  
License: CC BY 4.0 with a link back

CVE-2026-40619 · Severity: high · CVSS 7.8 · Published 2026-06-02

A security vulnerability has been identified in Genetec Security Center main server installations where administrative credentials may be stored in plain text within installation logs. An attacker who already has local access to the server could retrieve these credentials to gain full administrative control over the security system. This issue affects specific installation packages for versions 5.7 through 5.13, and organizations are advised to rotate passwords and use the provided cleanup utility.

Technologies: [Genetec Security Center](https://junglewise.ai/threats/technologies/security-center). Vendors: [Genetec](https://junglewise.ai/threats/vendors/genetec).

## Quick answers

**Is CVE-2026-40619 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-40619 being exploited in the wild.

**How severe is CVE-2026-40619?** High severity, with a CVSS score of 7.8, published 2 June 2026.

**Which products and versions are affected?** Genetec Security Center 5.7 SR6 to 5.13.3 (specific builds).

**Is there a fix for CVE-2026-40619?** A patch was published on 2026-05-13: Remediated builds for 5.11.3 and 5.12.2 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-40619 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-40619?** Check whether you run Genetec Security Center at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A sensitive information disclosure vulnerability (CWE-532) exists in the installation process of Genetec Security Center main servers. The Server Admin password may be captured in plain text within installation logs located in the ProgramData directory (or custom silent install locations) under specific conditions. An attacker with local OS privileges can read these logs to obtain administrative credentials for the Security Center application. The vulnerability affects new deployments of versions 5.7 SR6 through 5.13.3; however, Genetec released remediated builds under the same version numbers in May 2026, requiring hash verification to confirm exposure. Remediation involves rotating the admin password and running the 'SecurityUtility_CVE-2026-40619_SAM.exe' tool to purge the logs.

## Affected products

- Genetec Security Center 5.7 SR6 to 5.13.3 (specific builds)

## Timeline

- 2026-05-13: patched: Remediated builds for 5.11.3 and 5.12.2 released
- 2026-05-14: patched: Remediated builds for 5.13.3 released
- 2026-05-21: patched: Remediated builds for 5.10.4 released
- 2026-06-02: advisory: Initial public disclosure by Genetec

## References

- [https://resources.genetec.com/security-advisories/vulnerability-affecting-security-center-systems-main-server-installations](https://resources.genetec.com/security-advisories/vulnerability-affecting-security-center-systems-main-server-installations)

## Related threats

- [Genetec Security Center authorization bypass in Media Gateway API](https://junglewise.ai/threats/cve-2026-65422-a-flaw-in-the-authorization-mechanism-for-media-gateway-api-in)
- [Genetec Security Center authentication bypass in video stream requests](https://junglewise.ai/threats/cve-2026-55727-genetec-security-center-authentication-bypass-in-video-stream)
- [Genetec Security Center SQL injection in Access Manager](https://junglewise.ai/threats/cve-2026-27768-genetec-security-center-sql-injection-in-access-manager)