Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
12 vulnerabilities by Genians, Inc
CVE-2026-76147 (GCVE-0-2026-76147)
Vulnerability from nvd – Published: 2026-10-01 04:53 – Updated: 2026-10-01 15:49
VLAI
EPSS
VEX
Title
Genians, Inc Genian NAC/ZTNA Remote Code Execution
Summary
A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 15:49 UTC
Assigner
References
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Genians, Inc | Genian NAC 4.0.175 Release |
Affected:
0 , < 148817
(custom)
|
|
| Genians, Inc | Genian NAC 5.0.65 LTS Release |
Affected:
0 , < 148816
(custom)
|
|
| Genians, Inc | Genian NAC 5.0.75 LTS Release |
Affected:
0 , < 148815
(custom)
|
|
| Genians, Inc | Genian NAC 5.0.85 Release Stable |
Affected:
0 , < 148814
(custom)
|
|
| Genians, Inc | Genian NAC 5.0.86 Release |
Affected:
0 , < 148813
(custom)
|
|
| Genians, Inc | Genian ZTNA 6.0.26 LTS Release |
Affected:
0 , < 148811
(custom)
|
|
| Genians, Inc | Genian ZTNA 6.0.35 LTS Release |
Affected:
0 , < 148810
(custom)
|
|
| Genians, Inc | Genian ZTNA 6.0.45 Release Stable |
Affected:
0 , < 148809
(custom)
|
|
| Genians, Inc | Genian ZTNA 6.0.46 Release |
Affected:
0 , < 148807
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76147",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T15:49:04.514570Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T15:49:14.311Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Genian NAC 4.0.175 Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148817",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian NAC 5.0.65 LTS Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148816",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian NAC 5.0.75 LTS Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148815",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian NAC 5.0.85 Release Stable",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148814",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian NAC 5.0.86 Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148813",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian ZTNA 6.0.26 LTS Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148811",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian ZTNA 6.0.35 LTS Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148810",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian ZTNA 6.0.45 Release Stable",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148809",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian ZTNA 6.0.46 Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148807",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "segyeong"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code\u003c/p\u003e"
}
],
"value": "A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code"
}
],
"impacts": [
{
"capecId": "CAPEC-126",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-126"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-807",
"description": "CWE-807",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T04:53:39.899Z",
"orgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"shortName": "krcert"
},
"references": [
{
"url": "https://docs.genians.com/release/ko/advisories/GN-SA-2026-001.html"
},
{
"url": "https://github.com/genians/security-research/security/advisories/GHSA-c883-w46g-6mg5"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eGenian NAC 4.0.175 Release: update to Revision 148817 or later.\u003c/p\u003e\u003cp\u003eGenian NAC 5.0.65 LTS Release: update to Revision 148816 or later.\u003c/p\u003e\u003cp\u003eGenian NAC 5.0.75 LTS Release: update to Revision 148815 or later.\u003c/p\u003e\u003cp\u003eGenian NAC 5.0.85 Release Stable: update to Revision 148814 or later.\u003c/p\u003e\u003cp\u003eGenian NAC 5.0.86 Release: update to Revision 148813 or later.\u003c/p\u003e\u003cp\u003eGenian ZTNA 6.0.26 LTS Release: update to Revision 148811 or later.\u003c/p\u003e\u003cp\u003eGenian ZTNA 6.0.35 LTS Release: update to Revision 148810 or later.\u003c/p\u003e\u003cp\u003eGenian ZTNA 6.0.45 Release Stable: update to Revision 148809 or later.\u003c/p\u003e\u003cp\u003eGenian ZTNA 6.0.46 Release: update to Revision 148807 or later.\u003c/p\u003e"
}
],
"value": "Genian NAC 4.0.175 Release: update to Revision 148817 or later.\n\n\n\nGenian NAC 5.0.65 LTS Release: update to Revision 148816 or later.\n\n\n\nGenian NAC 5.0.75 LTS Release: update to Revision 148815 or later.\n\n\n\nGenian NAC 5.0.85 Release Stable: update to Revision 148814 or later.\n\n\n\nGenian NAC 5.0.86 Release: update to Revision 148813 or later.\n\n\n\nGenian ZTNA 6.0.26 LTS Release: update to Revision 148811 or later.\n\n\n\nGenian ZTNA 6.0.35 LTS Release: update to Revision 148810 or later.\n\n\n\nGenian ZTNA 6.0.45 Release Stable: update to Revision 148809 or later.\n\n\n\nGenian ZTNA 6.0.46 Release: update to Revision 148807 or later."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Genians, Inc Genian NAC/ZTNA Remote Code Execution",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"assignerShortName": "krcert",
"cveId": "CVE-2026-76147",
"datePublished": "2026-10-01T04:53:39.899Z",
"dateReserved": "2026-08-19T04:13:28.895Z",
"dateUpdated": "2026-10-01T15:49:14.311Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76146 (GCVE-0-2026-76146)
Vulnerability from nvd – Published: 2026-10-01 04:53 – Updated: 2026-10-01 15:59
VLAI
EPSS
VEX
Title
Genians, Inc Genian SSL PNS OS Command Injection
Summary
An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 15:59 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Genians, Inc | Genian SSL PNS (xenics_auther) |
Affected:
0 , < 1.0.1
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76146",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T15:59:35.764562Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T15:59:53.440Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Genian SSL PNS (xenics_auther)",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "1.0.1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely\u003c/p\u003e"
}
],
"value": "An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely"
}
],
"impacts": [
{
"capecId": "CAPEC-88",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-88"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T04:53:39.063Z",
"orgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"shortName": "krcert"
},
"references": [
{
"url": "https://github.com/genians/security-research/security/advisories/GHSA-2597-v98f-frhj"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpdate Genian SSL PNS (xenics_auther) to version 1.0.1.\u003c/p\u003e"
}
],
"value": "Update Genian SSL PNS (xenics_auther) to version 1.0.1."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Genians, Inc Genian SSL PNS OS Command Injection",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"assignerShortName": "krcert",
"cveId": "CVE-2026-76146",
"datePublished": "2026-10-01T04:53:39.063Z",
"dateReserved": "2026-08-19T04:13:00.870Z",
"dateUpdated": "2026-10-01T15:59:53.440Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76145 (GCVE-0-2026-76145)
Vulnerability from nvd – Published: 2026-10-01 04:53 – Updated: 2026-10-01 15:50
VLAI
EPSS
VEX
Title
Genians, Inc Genian SSL PNS Improper Privilege Management
Summary
An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 15:49 UTC
CWE
- CWE-269 - Improper Privilege Management
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Genians, Inc | Genian SSL PNS (frodo-core) |
Affected:
0 , < 5.0.0
(semver)
|
|
| Genians, Inc | Genian SSL PNS (watchcat-ui) |
Affected:
0 , < 5.0.0
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76145",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T15:49:51.919350Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T15:50:19.296Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Genian SSL PNS (frodo-core)",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "5.0.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian SSL PNS (watchcat-ui)",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "5.0.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration\u003c/p\u003e"
}
],
"value": "An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration"
}
],
"impacts": [
{
"capecId": "CAPEC-233",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-233"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T04:53:38.223Z",
"orgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"shortName": "krcert"
},
"references": [
{
"url": "https://github.com/genians/security-research/security/advisories/GHSA-8mjh-295r-5hf2"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpdate Genian SSL PNS frodo-core and watchcat-ui to version 5.0.0.\u003c/p\u003e"
}
],
"value": "Update Genian SSL PNS frodo-core and watchcat-ui to version 5.0.0."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Genians, Inc Genian SSL PNS Improper Privilege Management",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"assignerShortName": "krcert",
"cveId": "CVE-2026-76145",
"datePublished": "2026-10-01T04:53:38.223Z",
"dateReserved": "2026-08-19T04:13:00.870Z",
"dateUpdated": "2026-10-01T15:50:19.296Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76144 (GCVE-0-2026-76144)
Vulnerability from nvd – Published: 2026-10-01 04:53 – Updated: 2026-10-01 16:00
VLAI
EPSS
VEX
Title
Genians, Inc Genian SSL PNS Unrestricted File Upload
Summary
An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 16:00 UTC
CWE
- CWE-434 - Unrestricted Upload of File with Dangerous Type
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Genians, Inc | Genian SSL PNS (frodo-core) |
Affected:
0 , < 5.0.0
(semver)
|
|
| Genians, Inc | Genian SSL PNS (watchcat-ui) |
Affected:
0 , < 5.0.0
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76144",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T16:00:33.807397Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T16:00:42.805Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Genian SSL PNS (frodo-core)",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "5.0.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian SSL PNS (watchcat-ui)",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "5.0.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch\u003c/p\u003e"
}
],
"value": "An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch"
}
],
"impacts": [
{
"capecId": "CAPEC-650",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-650"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"baseScore": 1.8,
"baseSeverity": "LOW",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-434",
"description": "CWE-434 Unrestricted Upload of File with Dangerous Type",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T04:53:37.395Z",
"orgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"shortName": "krcert"
},
"references": [
{
"url": "https://github.com/genians/security-research/security/advisories/GHSA-7c2x-ph7p-5m2f"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpdate Genian SSL PNS frodo-core and watchcat-ui to version 5.0.0.\u003c/p\u003e"
}
],
"value": "Update Genian SSL PNS frodo-core and watchcat-ui to version 5.0.0."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Genians, Inc Genian SSL PNS Unrestricted File Upload",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"assignerShortName": "krcert",
"cveId": "CVE-2026-76144",
"datePublished": "2026-10-01T04:53:37.395Z",
"dateReserved": "2026-08-19T04:13:00.870Z",
"dateUpdated": "2026-10-01T16:00:42.805Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76143 (GCVE-0-2026-76143)
Vulnerability from nvd – Published: 2026-10-01 04:53 – Updated: 2026-10-01 16:01
VLAI
EPSS
VEX
Title
Genians, Inc Genian SSL PNS Multi Factor Authentication Bypass
Summary
A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 16:00 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Genians, Inc | Genian SSL PNS (frodo-core) |
Affected:
0 , < 5.0.0
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76143",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T16:00:56.817603Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T16:01:06.994Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Genian SSL PNS (frodo-core)",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "5.0.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Genians, Inc"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter.\u003c/p\u003e"
}
],
"value": "A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter."
}
],
"impacts": [
{
"capecId": "CAPEC-115",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-115"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T04:53:36.564Z",
"orgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"shortName": "krcert"
},
"references": [
{
"url": "https://github.com/genians/security-research/security/advisories/GHSA-gf55-r82f-x8m8"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpdate Genian SSL PNS (frodo-core) to version 5.0.0.\u003c/p\u003e"
}
],
"value": "Update Genian SSL PNS (frodo-core) to version 5.0.0."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Genians, Inc Genian SSL PNS Multi Factor Authentication Bypass",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"assignerShortName": "krcert",
"cveId": "CVE-2026-76143",
"datePublished": "2026-10-01T04:53:36.564Z",
"dateReserved": "2026-08-19T04:13:00.870Z",
"dateUpdated": "2026-10-01T16:01:06.994Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76142 (GCVE-0-2026-76142)
Vulnerability from nvd – Published: 2026-10-01 04:53 – Updated: 2026-10-01 15:58
VLAI
EPSS
VEX
Title
Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface
Summary
Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 15:58 UTC
Assigner
References
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Genians, Inc | Genian NAC 5.0.75 LTS Release |
Affected:
135823 , < 148667
(custom)
|
|
| Genians, Inc | Genian NAC 5.0.85 Release Stable |
Affected:
147181 , < 148666
(custom)
|
|
| Genians, Inc | Genian NAC 5.0.86 Release |
Affected:
148018 , < 148665
(custom)
|
|
| Genians, Inc | Genian ZTNA 6.0.35 LTS Release |
Affected:
135814 , < 148672
(custom)
|
|
| Genians, Inc | Genian ZTNA 6.0.45 Release Stable |
Affected:
147169 , < 148671
(custom)
|
|
| Genians, Inc | Genian ZTNA 6.0.46 Release |
Affected:
148028 , < 148670
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76142",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T15:58:10.619392Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T15:58:20.134Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Genian NAC 5.0.75 LTS Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148667",
"status": "affected",
"version": "135823",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian NAC 5.0.85 Release Stable",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148666",
"status": "affected",
"version": "147181",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian NAC 5.0.86 Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148665",
"status": "affected",
"version": "148018",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian ZTNA 6.0.35 LTS Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148672",
"status": "affected",
"version": "135814",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian ZTNA 6.0.45 Release Stable",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148671",
"status": "affected",
"version": "147169",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian ZTNA 6.0.46 Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148670",
"status": "affected",
"version": "148028",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "segyeong"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eInsufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions\u003c/p\u003e"
}
],
"value": "Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions"
}
],
"impacts": [
{
"capecId": "CAPEC-115",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-115"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284 Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T04:53:35.730Z",
"orgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"shortName": "krcert"
},
"references": [
{
"url": "https://docs.genians.com/release/ko/advisories/GN-SA-2026-002.html"
},
{
"url": "https://github.com/genians/security-research/security/advisories/GHSA-qf3p-2jpg-3h95"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eGenian NAC 5.0.75 LTS Release: update to Revision 148667 or later.\u003c/p\u003e\u003cp\u003eGenian NAC 5.0.85 Release Stable: update to Revision 148666 or later.\u003c/p\u003e\u003cp\u003eGenian NAC 5.0.86 Release: update to Revision 148665 or later.\u003c/p\u003e\u003cp\u003eGenian ZTNA 6.0.35 LTS Release: update to Revision 148672 or later.\u003c/p\u003e\u003cp\u003eGenian ZTNA 6.0.45 Release Stable: update to Revision 148671 or later.\u003c/p\u003e\u003cp\u003eGenian ZTNA 6.0.46 Release: update to Revision 148670 or later.\u003c/p\u003e"
}
],
"value": "Genian NAC 5.0.75 LTS Release: update to Revision 148667 or later.\n\n\n\nGenian NAC 5.0.85 Release Stable: update to Revision 148666 or later.\n\n\n\nGenian NAC 5.0.86 Release: update to Revision 148665 or later.\n\n\n\nGenian ZTNA 6.0.35 LTS Release: update to Revision 148672 or later.\n\n\n\nGenian ZTNA 6.0.45 Release Stable: update to Revision 148671 or later.\n\n\n\nGenian ZTNA 6.0.46 Release: update to Revision 148670 or later."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"assignerShortName": "krcert",
"cveId": "CVE-2026-76142",
"datePublished": "2026-10-01T04:53:35.730Z",
"dateReserved": "2026-08-19T04:13:00.870Z",
"dateUpdated": "2026-10-01T15:58:20.134Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76147 (GCVE-0-2026-76147)
Vulnerability from cvelistv5 – Published: 2026-10-01 04:53 – Updated: 2026-10-01 15:49
VLAI
EPSS
VEX
Title
Genians, Inc Genian NAC/ZTNA Remote Code Execution
Summary
A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 15:49 UTC
Assigner
References
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Genians, Inc | Genian NAC 4.0.175 Release |
Affected:
0 , < 148817
(custom)
|
|
| Genians, Inc | Genian NAC 5.0.65 LTS Release |
Affected:
0 , < 148816
(custom)
|
|
| Genians, Inc | Genian NAC 5.0.75 LTS Release |
Affected:
0 , < 148815
(custom)
|
|
| Genians, Inc | Genian NAC 5.0.85 Release Stable |
Affected:
0 , < 148814
(custom)
|
|
| Genians, Inc | Genian NAC 5.0.86 Release |
Affected:
0 , < 148813
(custom)
|
|
| Genians, Inc | Genian ZTNA 6.0.26 LTS Release |
Affected:
0 , < 148811
(custom)
|
|
| Genians, Inc | Genian ZTNA 6.0.35 LTS Release |
Affected:
0 , < 148810
(custom)
|
|
| Genians, Inc | Genian ZTNA 6.0.45 Release Stable |
Affected:
0 , < 148809
(custom)
|
|
| Genians, Inc | Genian ZTNA 6.0.46 Release |
Affected:
0 , < 148807
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76147",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T15:49:04.514570Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T15:49:14.311Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Genian NAC 4.0.175 Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148817",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian NAC 5.0.65 LTS Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148816",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian NAC 5.0.75 LTS Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148815",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian NAC 5.0.85 Release Stable",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148814",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian NAC 5.0.86 Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148813",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian ZTNA 6.0.26 LTS Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148811",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian ZTNA 6.0.35 LTS Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148810",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian ZTNA 6.0.45 Release Stable",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148809",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian ZTNA 6.0.46 Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148807",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "segyeong"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code\u003c/p\u003e"
}
],
"value": "A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code"
}
],
"impacts": [
{
"capecId": "CAPEC-126",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-126"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-807",
"description": "CWE-807",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T04:53:39.899Z",
"orgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"shortName": "krcert"
},
"references": [
{
"url": "https://docs.genians.com/release/ko/advisories/GN-SA-2026-001.html"
},
{
"url": "https://github.com/genians/security-research/security/advisories/GHSA-c883-w46g-6mg5"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eGenian NAC 4.0.175 Release: update to Revision 148817 or later.\u003c/p\u003e\u003cp\u003eGenian NAC 5.0.65 LTS Release: update to Revision 148816 or later.\u003c/p\u003e\u003cp\u003eGenian NAC 5.0.75 LTS Release: update to Revision 148815 or later.\u003c/p\u003e\u003cp\u003eGenian NAC 5.0.85 Release Stable: update to Revision 148814 or later.\u003c/p\u003e\u003cp\u003eGenian NAC 5.0.86 Release: update to Revision 148813 or later.\u003c/p\u003e\u003cp\u003eGenian ZTNA 6.0.26 LTS Release: update to Revision 148811 or later.\u003c/p\u003e\u003cp\u003eGenian ZTNA 6.0.35 LTS Release: update to Revision 148810 or later.\u003c/p\u003e\u003cp\u003eGenian ZTNA 6.0.45 Release Stable: update to Revision 148809 or later.\u003c/p\u003e\u003cp\u003eGenian ZTNA 6.0.46 Release: update to Revision 148807 or later.\u003c/p\u003e"
}
],
"value": "Genian NAC 4.0.175 Release: update to Revision 148817 or later.\n\n\n\nGenian NAC 5.0.65 LTS Release: update to Revision 148816 or later.\n\n\n\nGenian NAC 5.0.75 LTS Release: update to Revision 148815 or later.\n\n\n\nGenian NAC 5.0.85 Release Stable: update to Revision 148814 or later.\n\n\n\nGenian NAC 5.0.86 Release: update to Revision 148813 or later.\n\n\n\nGenian ZTNA 6.0.26 LTS Release: update to Revision 148811 or later.\n\n\n\nGenian ZTNA 6.0.35 LTS Release: update to Revision 148810 or later.\n\n\n\nGenian ZTNA 6.0.45 Release Stable: update to Revision 148809 or later.\n\n\n\nGenian ZTNA 6.0.46 Release: update to Revision 148807 or later."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Genians, Inc Genian NAC/ZTNA Remote Code Execution",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"assignerShortName": "krcert",
"cveId": "CVE-2026-76147",
"datePublished": "2026-10-01T04:53:39.899Z",
"dateReserved": "2026-08-19T04:13:28.895Z",
"dateUpdated": "2026-10-01T15:49:14.311Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76146 (GCVE-0-2026-76146)
Vulnerability from cvelistv5 – Published: 2026-10-01 04:53 – Updated: 2026-10-01 15:59
VLAI
EPSS
VEX
Title
Genians, Inc Genian SSL PNS OS Command Injection
Summary
An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 15:59 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Genians, Inc | Genian SSL PNS (xenics_auther) |
Affected:
0 , < 1.0.1
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76146",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T15:59:35.764562Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T15:59:53.440Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Genian SSL PNS (xenics_auther)",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "1.0.1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely\u003c/p\u003e"
}
],
"value": "An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely"
}
],
"impacts": [
{
"capecId": "CAPEC-88",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-88"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T04:53:39.063Z",
"orgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"shortName": "krcert"
},
"references": [
{
"url": "https://github.com/genians/security-research/security/advisories/GHSA-2597-v98f-frhj"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpdate Genian SSL PNS (xenics_auther) to version 1.0.1.\u003c/p\u003e"
}
],
"value": "Update Genian SSL PNS (xenics_auther) to version 1.0.1."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Genians, Inc Genian SSL PNS OS Command Injection",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"assignerShortName": "krcert",
"cveId": "CVE-2026-76146",
"datePublished": "2026-10-01T04:53:39.063Z",
"dateReserved": "2026-08-19T04:13:00.870Z",
"dateUpdated": "2026-10-01T15:59:53.440Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76145 (GCVE-0-2026-76145)
Vulnerability from cvelistv5 – Published: 2026-10-01 04:53 – Updated: 2026-10-01 15:50
VLAI
EPSS
VEX
Title
Genians, Inc Genian SSL PNS Improper Privilege Management
Summary
An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 15:49 UTC
CWE
- CWE-269 - Improper Privilege Management
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Genians, Inc | Genian SSL PNS (frodo-core) |
Affected:
0 , < 5.0.0
(semver)
|
|
| Genians, Inc | Genian SSL PNS (watchcat-ui) |
Affected:
0 , < 5.0.0
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76145",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T15:49:51.919350Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T15:50:19.296Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Genian SSL PNS (frodo-core)",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "5.0.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian SSL PNS (watchcat-ui)",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "5.0.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration\u003c/p\u003e"
}
],
"value": "An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration"
}
],
"impacts": [
{
"capecId": "CAPEC-233",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-233"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T04:53:38.223Z",
"orgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"shortName": "krcert"
},
"references": [
{
"url": "https://github.com/genians/security-research/security/advisories/GHSA-8mjh-295r-5hf2"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpdate Genian SSL PNS frodo-core and watchcat-ui to version 5.0.0.\u003c/p\u003e"
}
],
"value": "Update Genian SSL PNS frodo-core and watchcat-ui to version 5.0.0."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Genians, Inc Genian SSL PNS Improper Privilege Management",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"assignerShortName": "krcert",
"cveId": "CVE-2026-76145",
"datePublished": "2026-10-01T04:53:38.223Z",
"dateReserved": "2026-08-19T04:13:00.870Z",
"dateUpdated": "2026-10-01T15:50:19.296Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76144 (GCVE-0-2026-76144)
Vulnerability from cvelistv5 – Published: 2026-10-01 04:53 – Updated: 2026-10-01 16:00
VLAI
EPSS
VEX
Title
Genians, Inc Genian SSL PNS Unrestricted File Upload
Summary
An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 16:00 UTC
CWE
- CWE-434 - Unrestricted Upload of File with Dangerous Type
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Genians, Inc | Genian SSL PNS (frodo-core) |
Affected:
0 , < 5.0.0
(semver)
|
|
| Genians, Inc | Genian SSL PNS (watchcat-ui) |
Affected:
0 , < 5.0.0
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76144",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T16:00:33.807397Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T16:00:42.805Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Genian SSL PNS (frodo-core)",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "5.0.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian SSL PNS (watchcat-ui)",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "5.0.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch\u003c/p\u003e"
}
],
"value": "An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch"
}
],
"impacts": [
{
"capecId": "CAPEC-650",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-650"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"baseScore": 1.8,
"baseSeverity": "LOW",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-434",
"description": "CWE-434 Unrestricted Upload of File with Dangerous Type",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T04:53:37.395Z",
"orgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"shortName": "krcert"
},
"references": [
{
"url": "https://github.com/genians/security-research/security/advisories/GHSA-7c2x-ph7p-5m2f"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpdate Genian SSL PNS frodo-core and watchcat-ui to version 5.0.0.\u003c/p\u003e"
}
],
"value": "Update Genian SSL PNS frodo-core and watchcat-ui to version 5.0.0."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Genians, Inc Genian SSL PNS Unrestricted File Upload",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"assignerShortName": "krcert",
"cveId": "CVE-2026-76144",
"datePublished": "2026-10-01T04:53:37.395Z",
"dateReserved": "2026-08-19T04:13:00.870Z",
"dateUpdated": "2026-10-01T16:00:42.805Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76143 (GCVE-0-2026-76143)
Vulnerability from cvelistv5 – Published: 2026-10-01 04:53 – Updated: 2026-10-01 16:01
VLAI
EPSS
VEX
Title
Genians, Inc Genian SSL PNS Multi Factor Authentication Bypass
Summary
A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 16:00 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Genians, Inc | Genian SSL PNS (frodo-core) |
Affected:
0 , < 5.0.0
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76143",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T16:00:56.817603Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T16:01:06.994Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Genian SSL PNS (frodo-core)",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "5.0.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Genians, Inc"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter.\u003c/p\u003e"
}
],
"value": "A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter."
}
],
"impacts": [
{
"capecId": "CAPEC-115",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-115"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T04:53:36.564Z",
"orgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"shortName": "krcert"
},
"references": [
{
"url": "https://github.com/genians/security-research/security/advisories/GHSA-gf55-r82f-x8m8"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpdate Genian SSL PNS (frodo-core) to version 5.0.0.\u003c/p\u003e"
}
],
"value": "Update Genian SSL PNS (frodo-core) to version 5.0.0."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Genians, Inc Genian SSL PNS Multi Factor Authentication Bypass",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"assignerShortName": "krcert",
"cveId": "CVE-2026-76143",
"datePublished": "2026-10-01T04:53:36.564Z",
"dateReserved": "2026-08-19T04:13:00.870Z",
"dateUpdated": "2026-10-01T16:01:06.994Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76142 (GCVE-0-2026-76142)
Vulnerability from cvelistv5 – Published: 2026-10-01 04:53 – Updated: 2026-10-01 15:58
VLAI
EPSS
VEX
Title
Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface
Summary
Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 15:58 UTC
Assigner
References
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Genians, Inc | Genian NAC 5.0.75 LTS Release |
Affected:
135823 , < 148667
(custom)
|
|
| Genians, Inc | Genian NAC 5.0.85 Release Stable |
Affected:
147181 , < 148666
(custom)
|
|
| Genians, Inc | Genian NAC 5.0.86 Release |
Affected:
148018 , < 148665
(custom)
|
|
| Genians, Inc | Genian ZTNA 6.0.35 LTS Release |
Affected:
135814 , < 148672
(custom)
|
|
| Genians, Inc | Genian ZTNA 6.0.45 Release Stable |
Affected:
147169 , < 148671
(custom)
|
|
| Genians, Inc | Genian ZTNA 6.0.46 Release |
Affected:
148028 , < 148670
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76142",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T15:58:10.619392Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T15:58:20.134Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Genian NAC 5.0.75 LTS Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148667",
"status": "affected",
"version": "135823",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian NAC 5.0.85 Release Stable",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148666",
"status": "affected",
"version": "147181",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian NAC 5.0.86 Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148665",
"status": "affected",
"version": "148018",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian ZTNA 6.0.35 LTS Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148672",
"status": "affected",
"version": "135814",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian ZTNA 6.0.45 Release Stable",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148671",
"status": "affected",
"version": "147169",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Genian ZTNA 6.0.46 Release",
"vendor": "Genians, Inc",
"versions": [
{
"lessThan": "148670",
"status": "affected",
"version": "148028",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "segyeong"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eInsufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions\u003c/p\u003e"
}
],
"value": "Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions"
}
],
"impacts": [
{
"capecId": "CAPEC-115",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-115"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284 Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T04:53:35.730Z",
"orgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"shortName": "krcert"
},
"references": [
{
"url": "https://docs.genians.com/release/ko/advisories/GN-SA-2026-002.html"
},
{
"url": "https://github.com/genians/security-research/security/advisories/GHSA-qf3p-2jpg-3h95"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eGenian NAC 5.0.75 LTS Release: update to Revision 148667 or later.\u003c/p\u003e\u003cp\u003eGenian NAC 5.0.85 Release Stable: update to Revision 148666 or later.\u003c/p\u003e\u003cp\u003eGenian NAC 5.0.86 Release: update to Revision 148665 or later.\u003c/p\u003e\u003cp\u003eGenian ZTNA 6.0.35 LTS Release: update to Revision 148672 or later.\u003c/p\u003e\u003cp\u003eGenian ZTNA 6.0.45 Release Stable: update to Revision 148671 or later.\u003c/p\u003e\u003cp\u003eGenian ZTNA 6.0.46 Release: update to Revision 148670 or later.\u003c/p\u003e"
}
],
"value": "Genian NAC 5.0.75 LTS Release: update to Revision 148667 or later.\n\n\n\nGenian NAC 5.0.85 Release Stable: update to Revision 148666 or later.\n\n\n\nGenian NAC 5.0.86 Release: update to Revision 148665 or later.\n\n\n\nGenian ZTNA 6.0.35 LTS Release: update to Revision 148672 or later.\n\n\n\nGenian ZTNA 6.0.45 Release Stable: update to Revision 148671 or later.\n\n\n\nGenian ZTNA 6.0.46 Release: update to Revision 148670 or later."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "cdd7a122-0fae-4202-8d86-14efbacc2863",
"assignerShortName": "krcert",
"cveId": "CVE-2026-76142",
"datePublished": "2026-10-01T04:53:35.730Z",
"dateReserved": "2026-08-19T04:13:00.870Z",
"dateUpdated": "2026-10-01T15:58:20.134Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}