CVE-2026-76147: Genians, Inc Genian NAC/ZTNA Remote Code Execution

Severity: medium (CVSS 5.9 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-01 · updated 2026-10-01
Weakness: CWE-22

Description

A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code

Affected products

Genians, Inc Genian NAC 4.0.175 Release: before 148817 — fixed in 148817
Genians, Inc Genian NAC 5.0.65 LTS Release: before 148816 — fixed in 148816
Genians, Inc Genian NAC 5.0.75 LTS Release: before 148815 — fixed in 148815
Genians, Inc Genian NAC 5.0.85 Release Stable: before 148814 — fixed in 148814
Genians, Inc Genian NAC 5.0.86 Release: before 148813 — fixed in 148813
Genians, Inc Genian ZTNA 6.0.26 LTS Release: before 148811 — fixed in 148811
Genians, Inc Genian ZTNA 6.0.35 LTS Release: before 148810 — fixed in 148810
Genians, Inc Genian ZTNA 6.0.45 Release Stable: before 148809 — fixed in 148809
Genians, Inc Genian ZTNA 6.0.46 Release: before 148807 — fixed in 148807

How to fix

Upgrade to a fixed version: Genians, Inc Genian NAC 4.0.175 Release 148817; Genians, Inc Genian NAC 5.0.65 LTS Release 148816; Genians, Inc Genian NAC 5.0.75 LTS Release 148815; Genians, Inc Genian NAC 5.0.85 Release Stable 148814; Genians, Inc Genian NAC 5.0.86 Release 148813; Genians, Inc Genian ZTNA 6.0.26 LTS Release 148811; Genians, Inc Genian ZTNA 6.0.35 LTS Release 148810; Genians, Inc Genian ZTNA 6.0.45 Release Stable 148809; Genians, Inc Genian ZTNA 6.0.46 Release 148807. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-76147 or the next vulnerability affects your stack