CVE-2026-55727
HIGHCVSS 7.5/10EPSS 0.29%
Last modified
CVE-2026-55727 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14.0.0 prior to build 5.14.178.18 may allow an unauthenticated attacker to access live video streams.. EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14.0.0 prior to build 5.14.178.18 may allow an unauthenticated attacker to access live video streams.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Genetec Inc. | Genetec Security Center | >= 5.14.0.0 build 5.14.178.8, < 5.14.0.0 build 5.14.178.18 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-55727?
A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14.0.0 prior to build 5.14.178.18 may allow an unauthenticated attacker to access live video streams.
How severe is CVE-2026-55727?
CVE-2026-55727 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.29% probability of exploitation in the next 30 days.
How do I fix CVE-2026-55727?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-5571A vulnerability was identified in Technostrobe HI-LED-WR120-…7.5
- CVE-2026-55717In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, whe…5.9
- CVE-2026-5572A security flaw has been discovered in Technostrobe HI-LED-W…4.3
- CVE-2026-55721Storage Concentrator (SC & SCVM) is vulnerable to SQL inject…9.3
- CVE-2026-55723When NGINX Ingress Controller is configured with Custom Reso…8.7
- CVE-2026-55726The Azure Blob Storage container used for Gardyn device logs…6.9
- CVE-2026-55728Stack-based Buffer Overflow (CWE-121) in `/usr/bin/ltsudo` `…3.8
- CVE-2026-55729Exposure of Sensitive Information (CWE-200) in LWEB802 brows…7.7
- CVE-2026-5573A weakness has been identified in Technostrobe HI-LED-WR120-…9.8
- CVE-2026-55730Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec…8.7
- CVE-2026-55731Unchecked input for loop condition (CWE-606) in the SNMP age…6.6
- CVE-2026-55732Out-of-bounds Read (CWE-125) in BACnet packet parsing (`bacd…8.7
Are you affected by CVE-2026-55727?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST