CVE-2026-76142criticalCWE-284 CWE-306

Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface

25Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3

probabilidade de exploração

—

exploração observada

nãonenhuma fonte reporta

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H

Produtos afetados

Genians, Inc · Genian NAC 5.0.75 LTS Release Genians, Inc · Genian NAC 5.0.85 Release Stable Genians, Inc · Genian NAC 5.0.86 Release Genians, Inc · Genian ZTNA 6.0.35 LTS Release Genians, Inc · Genian ZTNA 6.0.45 Release Stable Genians, Inc · Genian ZTNA 6.0.46 Release

Referências

https://docs.genians.com/release/ko/advisories/GN-SA-2026-002.html https://github.com/genians/security-research/security/advisories/GHSA-qf3p-2jpg-3h95