by Kastro
Paper/Archive/CVE-2026-76142

CVE-2026-76142

Genians, Inc Genian NAC 5.0.75 LTS Release — Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface

EPSS 0.3%CVSS 9.3
critical.is priorityof 100
33
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 26.5.265 × 205.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions

Affected

ProductAffectedFixed inSource
Genian NAC 5.0.75 LTS Release135823 – < 148667148667CNA
Genian NAC 5.0.85 Release Stable147181 – < 148666148666CNA
Genian NAC 5.0.86 Release148018 – < 148665148665CNA
Genian ZTNA 6.0.35 LTS Release135814 – < 148672148672CNA
Genian ZTNA 6.0.45 Release Stable147169 – < 148671148671CNA
Genian ZTNA 6.0.46 Release148028 – < 148670148670CNA

Scores by source

krcert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refdocs.genians.com/release/ko/advisories/GN-SA-2026-002.htmlrefgithub.com/genians/security-research/security/advisories/GHSA-qf3p-2jpg-3h95