{"schema":"threatline.record/2","record":{"id":"CVE-2026-76142","aliases":["GHSA-qf3p-2jpg-3h95"],"summary":"Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface","details":"Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions","categories":["Unclassified"],"product":"Genian NAC 5.0.75 LTS Release","vendor":"Genians, Inc","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76142","source_modified_at":"2026-10-01T15:58:20.134Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian NAC 5.0.75 LTS Release","vendor":"Genians, Inc","versions":[{"status":"affected","version":"135823","lessThan":"148667","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76142","source_modified_at":"2026-10-01T15:58:20.134Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian NAC 5.0.85 Release Stable","vendor":"Genians, Inc","versions":[{"status":"affected","version":"147181","lessThan":"148666","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76142","source_modified_at":"2026-10-01T15:58:20.134Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian NAC 5.0.86 Release","vendor":"Genians, Inc","versions":[{"status":"affected","version":"148018","lessThan":"148665","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76142","source_modified_at":"2026-10-01T15:58:20.134Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian ZTNA 6.0.35 LTS Release","vendor":"Genians, Inc","versions":[{"status":"affected","version":"135814","lessThan":"148672","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76142","source_modified_at":"2026-10-01T15:58:20.134Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian ZTNA 6.0.45 Release Stable","vendor":"Genians, Inc","versions":[{"status":"affected","version":"147169","lessThan":"148671","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76142","source_modified_at":"2026-10-01T15:58:20.134Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian ZTNA 6.0.46 Release","vendor":"Genians, Inc","versions":[{"status":"affected","version":"148028","lessThan":"148670","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76142","source_modified_at":"2026-10-01T15:58:20.134Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian NAC 5.0.75 LTS Release","ecosystem":null},"version":"148667","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76142","source_modified_at":"2026-10-01T15:58:20.134Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian NAC 5.0.85 Release Stable","ecosystem":null},"version":"148666","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76142","source_modified_at":"2026-10-01T15:58:20.134Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian NAC 5.0.86 Release","ecosystem":null},"version":"148665","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76142","source_modified_at":"2026-10-01T15:58:20.134Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian ZTNA 6.0.35 LTS Release","ecosystem":null},"version":"148672","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76142","source_modified_at":"2026-10-01T15:58:20.134Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian ZTNA 6.0.45 Release Stable","ecosystem":null},"version":"148671","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76142","source_modified_at":"2026-10-01T15:58:20.134Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian ZTNA 6.0.46 Release","ecosystem":null},"version":"148670","basis":"first unaffected version stated in the CVE record"}],"cvss":9.3,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.00333,"percentile":0.25315,"score_date":"2026-10-23"},"published_at":"2026-10-01T04:53:35.730Z","modified_at":"2026-10-01T15:58:20.134Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-76142","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-10-01T15:58:20.134Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-76142","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://docs.genians.com/release/ko/advisories/GN-SA-2026-002.html"},{"source":"CVE List","url":"https://github.com/genians/security-research/security/advisories/GHSA-qf3p-2jpg-3h95"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"partial","assessed_at":"2026-10-01T15:58:10.619392Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-01T15:58:20.134Z","content_hash":"3b38e70c70f83839bbe5d325970a2b0cddbfa9b0876f88972811bcfd3bd9fd49"}}