VulnSocial

CVE-2026-25112Patch

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-732

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-06-08); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-08: 2Mentions · 2026-07-29: 1Patch / Workaround · 2026-06-08: 1Patch / Workaround · 2026-07-29: 1Technical Details · 2026-06-08: 2Technical Details · 2026-07-29: 106-0807-29
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-082
Disclosure1Patch1
2026-07-291
Patch1
Full discourse3 posts
  • SEC Consult@sec_consult
    Patch

    🚨 New advisory by @Kruxinator & Christian Hager: Local privilege escalation in @genetec 's #RabbitMQ deployment (#CVE-2026-25112) Writable dir + missing binary + SeImpersonatePrivilege = SYSTEM via Rotten Potato 🥔 Patch available. Apply now! 🔗 https://r.sec-consult.com/genetec #privesc

    Post summary

    The advisory highlights a local privilege escalation vulnerability in Genetec’s RabbitMQ deployment and confirms that a patch is available, urging immediate application.

    0901883.0K
    2.5K followersView on X
  • Autumn Good@autumn_good_35
    Disclosure

    『allowed any authenticated user to inject arbitrary code that was then executed by the service.』 CVE-2026-25112 Privilege Escalation via Binary Planting in Genetec-provided RabbitMQ in multiple Genetec products https://sec-consult.com/vulnerability-lab/advisory/privilege-escalation-via-binary-planting-in-genetec-provided-rabbitmq-in-multiple-genetec-products/

    Post summary

    CVE‑2026‑25112 enables authenticated users to inject and execute arbitrary code in Genetec RabbitMQ, presenting a privilege escalation vector. The advisory provides the vulnerability details but no PoC, exploit, patch, or evidence of active exploitation.

    00010406
    6.9K followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH SEVERITY: CVE-2026-25112 (CVSS 7.8) Privilege escalation flaw in Genetec RabbitMQ deployment. Local attackers with low privileges can gain full system access. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/hDN5eFjSKw

    Post summary

    The post warns of a high‑severity privilege‑escalation flaw (CVE‑2026‑25112) in Genetec RabbitMQ and urges users to apply a patch immediately.

    0000050
    97 followersView on X

Explore more

Back to dashboard