SQL Injection Vulnerability in Genetec Security Center Access Manager
CVE-2026-27768
6.6MEDIUM
What is CVE-2026-27768?
An SQL Injection vulnerability has been identified in the Access Manager role of Genetec's Security Center. This weakness allows attackers to inject malicious SQL queries, potentially leading to unauthorized access to sensitive data or exploitation of the database. Proper security measures should be implemented to safeguard against this vulnerability, ensuring that input validation and prepared statements are utilized to protect the application.
Affected Version(s)
Genetec Security Center Windows <=5.9.5.11 <= 5.9.5.11
Genetec Security Center Windows <=5.10.4.31 <= 5.10.4.31
Genetec Security Center Windows <=5.11.3.28 <= 5.11.3.28