{"id":"CVE-2026-76147","state":"PUBLISHED","title":"Genians, Inc Genian NAC/ZTNA Remote Code Execution","description":"A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code","publishedAt":"2026-10-01T04:53:39.899Z","updatedAt":"2026-10-01T15:49:14.311Z","severity":{"score":5.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","source":"krcert"},"assigner":"krcert","products":["Genians, Inc Genian NAC 4.0.175 Release","Genians, Inc Genian NAC 5.0.65 LTS Release","Genians, Inc Genian NAC 5.0.75 LTS Release","Genians, Inc Genian NAC 5.0.85 Release Stable","Genians, Inc Genian NAC 5.0.86 Release","Genians, Inc Genian ZTNA 6.0.26 LTS Release","Genians, Inc Genian ZTNA 6.0.35 LTS Release","Genians, Inc Genian ZTNA 6.0.45 Release Stable","Genians, Inc Genian ZTNA 6.0.46 Release"],"affected":[{"vendor":"Genians, Inc","product":"Genian NAC 4.0.175 Release","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148817","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian NAC 5.0.65 LTS Release","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148816","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian NAC 5.0.75 LTS Release","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148815","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian NAC 5.0.85 Release Stable","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148814","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian NAC 5.0.86 Release","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148813","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian ZTNA 6.0.26 LTS Release","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148811","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian ZTNA 6.0.35 LTS Release","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148810","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian ZTNA 6.0.45 Release Stable","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148809","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian ZTNA 6.0.46 Release","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148807","versionType":"custom"}]}],"references":["https://docs.genians.com/release/ko/advisories/GN-SA-2026-001.html","https://github.com/genians/security-research/security/advisories/GHSA-c883-w46g-6mg5"],"weaknesses":["CWE-862","CWE-807","CWE-22"],"ingestedAt":"2026-10-29T20:12:58.252Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/76xxx/CVE-2026-76147.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-76147","state":"PUBLISHED","datePublished":"2026-10-01T04:53:39.899Z","dateUpdated":"2026-10-01T15:49:14.311Z","assignerShortName":"krcert","assignerOrgId":"cdd7a122-0fae-4202-8d86-14efbacc2863","dateReserved":"2026-08-19T04:13:28.895Z"},"containers":{"cna":{"title":"Genians, Inc Genian NAC/ZTNA Remote Code Execution","descriptions":[{"lang":"en","value":"A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code"}],"affected":[{"vendor":"Genians, Inc","product":"Genian NAC 4.0.175 Release","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148817","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian NAC 5.0.65 LTS Release","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148816","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian NAC 5.0.75 LTS Release","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148815","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian NAC 5.0.85 Release Stable","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148814","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian NAC 5.0.86 Release","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148813","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian ZTNA 6.0.26 LTS Release","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148811","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian ZTNA 6.0.35 LTS Release","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148810","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian ZTNA 6.0.45 Release Stable","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148809","versionType":"custom"}]},{"vendor":"Genians, Inc","product":"Genian ZTNA 6.0.46 Release","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"148807","versionType":"custom"}]}],"references":[{"url":"https://docs.genians.com/release/ko/advisories/GN-SA-2026-001.html"},{"url":"https://github.com/genians/security-research/security/advisories/GHSA-c883-w46g-6mg5"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"MEDIUM","baseScore":5.9,"vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-862","lang":"en","description":"CWE-862","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-807","lang":"en","description":"CWE-807","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-22","lang":"en","description":"CWE-22","type":"CWE"}]}],"providerMetadata":{"shortName":"krcert","orgId":"cdd7a122-0fae-4202-8d86-14efbacc2863","dateUpdated":"2026-10-01T04:53:39.899Z"},"impacts":[{"capecId":"CAPEC-126","descriptions":[{"lang":"en","value":"CAPEC-126"}]}],"solutions":[{"lang":"en","value":"Genian NAC 4.0.175 Release: update to Revision 148817 or later.\n\n\n\nGenian NAC 5.0.65 LTS Release: update to Revision 148816 or later.\n\n\n\nGenian NAC 5.0.75 LTS Release: update to Revision 148815 or later.\n\n\n\nGenian NAC 5.0.85 Release Stable: update to Revision 148814 or later.\n\n\n\nGenian NAC 5.0.86 Release: update to Revision 148813 or later.\n\n\n\nGenian ZTNA 6.0.26 LTS Release: update to Revision 148811 or later.\n\n\n\nGenian ZTNA 6.0.35 LTS Release: update to Revision 148810 or later.\n\n\n\nGenian ZTNA 6.0.45 Release Stable: update to Revision 148809 or later.\n\n\n\nGenian ZTNA 6.0.46 Release: update to Revision 148807 or later.","supportingMedia":[{"type":"text/html","base64":false,"value":"<p>Genian NAC 4.0.175 Release: update to Revision 148817 or later.</p><p>Genian NAC 5.0.65 LTS Release: update to Revision 148816 or later.</p><p>Genian NAC 5.0.75 LTS Release: update to Revision 148815 or later.</p><p>Genian NAC 5.0.85 Release Stable: update to Revision 148814 or later.</p><p>Genian NAC 5.0.86 Release: update to Revision 148813 or later.</p><p>Genian ZTNA 6.0.26 LTS Release: update to Revision 148811 or later.</p><p>Genian ZTNA 6.0.35 LTS Release: update to Revision 148810 or later.</p><p>Genian ZTNA 6.0.45 Release Stable: update to Revision 148809 or later.</p><p>Genian ZTNA 6.0.46 Release: update to Revision 148807 or later.</p>"}]}],"credits":[{"lang":"en","value":"segyeong","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-01T15:49:04.514570Z","id":"CVE-2026-76147","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-01T15:49:14.311Z"}}]}}}