What’s Vulnerable › Vulnerabilities

CVE-2026-76142: Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface

• Severity: critical (CVSS 9.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-01 · updated 2026-10-01
• Weakness: CWE-284

Description

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions

Affected products

• Genians, Inc Genian NAC 5.0.75 LTS Release: from 135823 before 148667 — fixed in 148667
• Genians, Inc Genian NAC 5.0.85 Release Stable: from 147181 before 148666 — fixed in 148666
• Genians, Inc Genian NAC 5.0.86 Release: from 148018 before 148665 — fixed in 148665
• Genians, Inc Genian ZTNA 6.0.35 LTS Release: from 135814 before 148672 — fixed in 148672
• Genians, Inc Genian ZTNA 6.0.45 Release Stable: from 147169 before 148671 — fixed in 148671
• Genians, Inc Genian ZTNA 6.0.46 Release: from 148028 before 148670 — fixed in 148670

How to fix

Upgrade to a fixed version: Genians, Inc Genian NAC 5.0.75 LTS Release 148667; Genians, Inc Genian NAC 5.0.85 Release Stable 148666; Genians, Inc Genian NAC 5.0.86 Release 148665; Genians, Inc Genian ZTNA 6.0.35 LTS Release 148672; Genians, Inc Genian ZTNA 6.0.45 Release Stable 148671; Genians, Inc Genian ZTNA 6.0.46 Release 148670. Check the vendor advisory for mitigations.

References

• https://docs.genians.com/release/ko/advisories/GN-SA-2026-002.html
• https://github.com/genians/security-research/security/advisories/GHSA-qf3p-2jpg-3h95

Get alerted when CVE-2026-76142 or the next vulnerability affects your stack