Vulnerability affecting Genetec Patroller systems and SharpV cameras

August 31st, 2026

This is a notice of a high-severity vulnerability affecting the ALPR Manager role of Security Center. It could lead to the exposure of sensitive data handled by the ALPR Manager role. The Genetec engineering team discovered this issue internally. There is currently no evidence that this vulnerability has been exploited in the wild. 

Risk assessment 

This vulnerability (CVE-2025-43028) affects the legacy endpoint used by Genetec Patroller™ and SharpV G1 and G2 cameras to communicate with the ALPR Manager role in Security Center. Successful exploitation could let an attacker exfiltrate sensitive data managed by that role. The CVSS v3.1 base score for this vulnerability is 8.2 (High). 

Details 

To avoid exploitation, customers must update the ALPR Manager role, and then update Patroller applications. SharpV G1 and G2 cameras need to be connected to the ALPR Manager using the LPM protocol to be protected. The LPM protocol is not affected by this vulnerability.

To facilitate migration to the latest version, the updated ALPR Manager role will maintain temporary backward compatibility by allowing legacy (unsecure) Patroller connectivity to Security Center.  

This means backward-compatible connectivity must be turned off to fully mitigate the vulnerability. This can be done in two ways:   

• Automatically, once all previously connected Patrollers have been updated to version 7.0.2 and have connected at least once  

• Manually, via the legacy Patroller connectivity (unsecure) toggle in Config Tool  

We have implemented additional security measures for system protection during migration to the newer Patroller version:  

• Config Tool displays a warning when Patrollers use the legacy protocol  

• Patrollers using the legacy protocol (version 6 and below) can no longer be added, reducing the risk of exposure to insecure communication

We have already remediated the vulnerability on the AutoVu™ Managed Services (AMS) server-side infrastructure. To maintain connectivity with AMS, customers must update all affected client-side components.  

Recommended steps

The ALPR Manager role must be updated first to maintain compatibility.  

1. Update the Config Tool to the patch versions listed in the table below. 

2. Update the ALPR Manager role:  

   • Make sure to update ALPR Manager before updating Patrollers.

   • Give “register Patroller” privilege to the user who will register the Patrollers.

3. Update Patroller applications and reconnect to the ALPR Manager role: 

   • Update Patroller applications to version 7.0.2.

   • Connect Patroller applications to the ALPR Manager role to register the update.

4. Verify that the legacy Patroller connectivity (unsecure) toggle is set to “off” in Config Tool: 

   • You can manually set legacy Patroller connectivity (unsecure) to “off” in ALPR > roles and units > live settings of the Config Tool. This will force Patroller systems running version 6 and below to be disconnected. 

   • Alternatively, legacy protocol support will be turned off automatically once all Patrollers are updated and have connected at least once. It is not possible to re-enable support for the legacy protocol. 

5. Update all SharpV G1 and G2 cameras to the latest SharpV OS and ensure they are connected to the ALPR manager using the LPM protocol.

Workaround 

If it is not possible to update all Patroller applications to version 7.0.2 in a timely fashion, clients should set legacy Patroller connectivity (unsecure) to off. This action will mitigate the vulnerability and prevent old Patrollers from connecting to Security Center until they are upgraded to version 7.0.2.    

If it is not possible to upgrade the ALPR Manager role in Security Center or to update all SharpV G1 and G2 cameras promptly, system administrators should reduce exposure to the system. Admins can restrict network access to only trusted sources and enforce secure connectivity measures such as VPNs or equivalent controls.    

Affected products

For more information or assistance, please log in to the Genetec Portal to open a support case.