This vulnerability (CVE-2026-55727) in Genetec Security Center 5.14.0.0 prior to build 5.14.178.18 is due to improper authentication (CWE-287) in the mechanism handling video stream requests. An unauthenticated attacker may exploit this flaw to gain unauthorized access to live video streams. The CVSS 3.1 base score is 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality impact. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

An unauthenticated attacker can access live video streams without authorization, leading to a high confidentiality breach. There is no impact on integrity or availability reported. This exposure of sensitive video feeds could compromise privacy and security monitoring.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected Genetec Security Center instances and monitor for unauthorized access attempts. Follow vendor communications closely for updates on patches or mitigations.