CVE-2026-76142criticalCWE-284 CWE-306

Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface

25Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.3

probabilidad de explotación

—

explotación observada

noninguna fuente lo reporta

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H

Productos afectados

Genians, Inc · Genian NAC 5.0.75 LTS Release Genians, Inc · Genian NAC 5.0.85 Release Stable Genians, Inc · Genian NAC 5.0.86 Release Genians, Inc · Genian ZTNA 6.0.35 LTS Release Genians, Inc · Genian ZTNA 6.0.45 Release Stable Genians, Inc · Genian ZTNA 6.0.46 Release

Referencias

https://docs.genians.com/release/ko/advisories/GN-SA-2026-002.html https://github.com/genians/security-research/security/advisories/GHSA-qf3p-2jpg-3h95