CVE-2026-40619: A high security vulnerability affecting Security Center main server installations has been identified

Synopsis

A local privilege escalation vulnerability affects Genetec Security Center main server installations across a wide range of versions from 5.7 SR6 through 5.13.3.0. An attacker who already has a low-privilege OS account on the host running the main server can exploit this flaw to access the Server Admin credentials without any network exposure or additional authentication. Successful exploitation gives the attacker full control over confidentiality, integrity, and availability of the Security Center server. Patched-image rebuilds at the fixed versions (>=5.14.0.0, >5.10.4.0, >5.11.3.0, >5.12.2.0, >5.13.3.0) are available on HarborGuard for affected environments.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no network access to the service is required.

• AuthenticationRequired

  Any low-privilege OS account on the main server host is sufficient; no elevated or admin rights are needed to initiate the attack.

• Victim interactionNot required

  Exploitation is fully attacker-driven and requires no action from any other user or administrator on the system.

• Attack complexityDetail

  The exploit is reliable and condition-free; no race conditions, specific memory layouts, or environmental dependencies are required.

Blast Radius

• Reads Server Admin credentials stored or accessible on the main server, enabling further lateral movement within the Security Center deployment.
• Modifies Security Center server configuration, access control rules, or persisted security event data.
• Crashes or disrupts the Security Center main server service, taking physical security management functions offline.
• Enables pivot to connected subsystems (cameras, access control hardware, integrations) by leveraging the recovered admin credentials.