Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-76142

Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
krcert

Description

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Genians, Inc Genian NAC 5.0.75 LTS Release

Default version status: unaffected

  • 135823 to < 148667affected

Genians, Inc Genian NAC 5.0.85 Release Stable

Default version status: unaffected

  • 147181 to < 148666affected

Genians, Inc Genian NAC 5.0.86 Release

Default version status: unaffected

  • 148018 to < 148665affected

Genians, Inc Genian ZTNA 6.0.35 LTS Release

Default version status: unaffected

  • 135814 to < 148672affected

Genians, Inc Genian ZTNA 6.0.45 Release Stable

Default version status: unaffected

  • 147169 to < 148671affected

Genians, Inc Genian ZTNA 6.0.46 Release

Default version status: unaffected

  • 148028 to < 148670affected

References