Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-16520

Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
FSI

Description

Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Genian NAC V4.0: from 4.0.0 before 4.0.175(Revision 150340); Genian NAC V5.0: from 5.0.0 before 5.0.65 LTS(Revision 150331), from 5.0.0 before 5.0.75 LTS(Revision 150330), from 5.0.0 before 5.0.87 Release Stable(Revision 150329), and from 5.0.0 before 5.0.88(Revision 150328); Genian ZTNA V6.0: from 6.0.0 before 6.0.26 LTS(Revision 150337), from 6.0.0 before 6.0.35 LTS(Revision 150336), from 6.0.0 before 6.0.47 Release Stable(Revision 150334), and from 6.0.0 before 6.0.48(Revision 150333).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Genians Genian NAC V4.0

Default version status: unaffected

  • 4.0.0 to < 4.0.175(Revision 150340)affected

Genians Genian NAC V5.0

Default version status: unaffected

  • 5.0.0 to < 5.0.65 LTS(Revision 150331)affected
  • 5.0.0 to < 5.0.75 LTS(Revision 150330)affected
  • 5.0.0 to < 5.0.87 Release Stable(Revision 150329)affected
  • 5.0.0 to < 5.0.88(Revision 150328)affected

Genians Genian ZTNA V6.0

Default version status: unaffected

  • 6.0.0 to < 6.0.26 LTS(Revision 150337)affected
  • 6.0.0 to < 6.0.35 LTS(Revision 150336)affected
  • 6.0.0 to < 6.0.47 Release Stable(Revision 150334)affected
  • 6.0.0 to < 6.0.48(Revision 150333)affected

References