What’s Vulnerable › Vulnerabilities
CVE-2026-76145: Genians, Inc Genian SSL PNS Improper Privilege Management
- Severity: high (CVSS 7.5 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-01 · updated 2026-10-01
- Weakness: CWE-269
Description
An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration
Affected products
- Genians, Inc Genian SSL PNS (frodo-core): before 5.0.0 — fixed in 5.0.0
- Genians, Inc Genian SSL PNS (watchcat-ui): before 5.0.0 — fixed in 5.0.0
How to fix
Upgrade to a fixed version: Genians, Inc Genian SSL PNS (frodo-core) 5.0.0; Genians, Inc Genian SSL PNS (watchcat-ui) 5.0.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-76145 or the next vulnerability affects your stack