All vulnerabilities
CVE-2026-76142GHSA-qf3p-2jpg-3h95

Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface

Genians, Inc Genian NAC 5.0.75 LTS Release
Open in ThreatlineRecord JSON
CVSS
9.3Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.33%Chance of exploitation activity in the next 30 days, higher than 25% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in148667Also 148666, 148665 and 3 moreCVE List
Published1 Oct 2026Updated 1 Oct 2026CVE List

What fixes it

  • 148667Genian NAC 5.0.75 LTS ReleaseCVE List
  • 148666Genian NAC 5.0.85 Release StableCVE List
  • 148665Genian NAC 5.0.86 ReleaseCVE List
  • 148672Genian ZTNA 6.0.35 LTS ReleaseCVE List
  • 148671Genian ZTNA 6.0.45 Release StableCVE List
  • 148670Genian ZTNA 6.0.46 ReleaseCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions

Text from CVE List

Affected versions 6

  • Genian NAC 5.0.75 LTS Releaseaffected: 135823 before 148667CVE List
  • Genian NAC 5.0.85 Release Stableaffected: 147181 before 148666CVE List
  • Genian NAC 5.0.86 Releaseaffected: 148018 before 148665CVE List
  • Genian ZTNA 6.0.35 LTS Releaseaffected: 135814 before 148672CVE List
  • Genian ZTNA 6.0.45 Release Stableaffected: 147169 before 148671CVE List
  • Genian ZTNA 6.0.46 Releaseaffected: 148028 before 148670CVE List

References 2