{"schema":"threatline.record/2","record":{"id":"CVE-2026-76147","aliases":["GHSA-c883-w46g-6mg5"],"summary":"Genians, Inc Genian NAC/ZTNA Remote Code Execution","details":"A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code","categories":["Unclassified"],"product":"Genian NAC 4.0.175 Release","vendor":"Genians, Inc","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian NAC 4.0.175 Release","vendor":"Genians, Inc","versions":[{"status":"affected","version":"0","lessThan":"148817","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian NAC 5.0.65 LTS Release","vendor":"Genians, Inc","versions":[{"status":"affected","version":"0","lessThan":"148816","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian NAC 5.0.75 LTS Release","vendor":"Genians, Inc","versions":[{"status":"affected","version":"0","lessThan":"148815","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian NAC 5.0.85 Release Stable","vendor":"Genians, Inc","versions":[{"status":"affected","version":"0","lessThan":"148814","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian NAC 5.0.86 Release","vendor":"Genians, Inc","versions":[{"status":"affected","version":"0","lessThan":"148813","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian ZTNA 6.0.26 LTS Release","vendor":"Genians, Inc","versions":[{"status":"affected","version":"0","lessThan":"148811","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian ZTNA 6.0.35 LTS Release","vendor":"Genians, Inc","versions":[{"status":"affected","version":"0","lessThan":"148810","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian ZTNA 6.0.45 Release Stable","vendor":"Genians, Inc","versions":[{"status":"affected","version":"0","lessThan":"148809","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Genian ZTNA 6.0.46 Release","vendor":"Genians, Inc","versions":[{"status":"affected","version":"0","lessThan":"148807","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian NAC 4.0.175 Release","ecosystem":null},"version":"148817","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian NAC 5.0.65 LTS Release","ecosystem":null},"version":"148816","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian NAC 5.0.75 LTS Release","ecosystem":null},"version":"148815","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian NAC 5.0.85 Release Stable","ecosystem":null},"version":"148814","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian NAC 5.0.86 Release","ecosystem":null},"version":"148813","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian ZTNA 6.0.26 LTS Release","ecosystem":null},"version":"148811","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian ZTNA 6.0.35 LTS Release","ecosystem":null},"version":"148810","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian ZTNA 6.0.45 Release Stable","ecosystem":null},"version":"148809","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","source_modified_at":"2026-10-01T15:49:14.311Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Genian ZTNA 6.0.46 Release","ecosystem":null},"version":"148807","basis":"first unaffected version stated in the CVE record"}],"cvss":5.9,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.00403,"percentile":0.33375,"score_date":"2026-10-23"},"published_at":"2026-10-01T04:53:39.899Z","modified_at":"2026-10-01T15:49:14.311Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-76147","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-10-01T15:49:14.311Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-76147","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://docs.genians.com/release/ko/advisories/GN-SA-2026-001.html"},{"source":"CVE List","url":"https://github.com/genians/security-research/security/advisories/GHSA-c883-w46g-6mg5"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","assessed_at":"2026-10-01T15:49:04.514570Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-01T15:49:14.311Z","content_hash":"1c9cb837131a8938a165b15e681c251ae417787766fac7ca823a484908b2ac2b"}}