← back
CVE-2026-76142criticalCWE-284CWE-306

Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface

25Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3
exploitation probability
—
observed exploitation
nono source reports it
Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
Affected products
Genians, Inc · Genian NAC 5.0.75 LTS ReleaseGenians, Inc · Genian NAC 5.0.85 Release StableGenians, Inc · Genian NAC 5.0.86 ReleaseGenians, Inc · Genian ZTNA 6.0.35 LTS ReleaseGenians, Inc · Genian ZTNA 6.0.45 Release StableGenians, Inc · Genian ZTNA 6.0.46 Release
References
https://docs.genians.com/release/ko/advisories/GN-SA-2026-002.htmlhttps://github.com/genians/security-research/security/advisories/GHSA-qf3p-2jpg-3h95