Genetec RabbitMQ Privilege Escalation Vulnerability (CVE-2026-25112) Bulletin

Vulnerability Overview Vulnerability Name: RabbitMQ Privilege Escalation Vulnerability Publication Date: May 25, 2026 Vulnerability Description: A privilege escalation vulnerability (CVE-2026-25112) exists in RabbitMQ deployed within Genetec products. When RabbitMQ is deployed alongside certain Genetec products, if unreliable diagnostic components are present in the environment, RabbitMQ may incorrectly rely on these components, leading to privilege escalation. CVSS Score: 7.8 (High) Impact Scope Affected Products: - RabbitMQ provided by Genetec (version 3.13.7.3 and earlier) - Genetec Mission ControlMC (version 3.4.1.0 and earlier) - Genetec Industrial IoT (IIoT) – 5.x series (version 5.5.118.0 and earlier) - Genetec Industrial IoT (IIoT) – 6.x series (version 6.0.196.0 and earlier) - Genetec Airport Operational Manager (AOM) (version 1.6 and earlier) - Genetec Restricted Security Area (RSA) Surveillance (version 5.2.1 and earlier) - Genetec Inter-System (IS) Gateway (version 1.2 and earlier) - Sipelia (version 2.11 and earlier) Remediation New Deployments: Use RabbitMQ version 3.13.7.19 provided by Genetec, which does not require the execution of diagnostic tools. Existing Deployments: 1. Download and run from the Genetec Security Center. 2. Execute the tool on the machine where RabbitMQ is installed, requiring administrator privileges. Alternative: If the patch cannot be applied promptly, restrict administrator access to the folder. Additional Information Contact Support: For more information or assistance, visit the Genetec Technical Assistance Portal (GTAP) to create a support ticket. Related Articles: Links to other security-related articles are provided at the bottom of the page. Code Block No POC code or exploit code is included on the page.

Goal Reached Thanks to every supporter — we hit 100%!

Genetec RabbitMQ Privilege Escalation Vulnerability (CVE-2026-25112) Bulletin