Riskcovery

CVE-2026-76142

Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface

State
Published
Severity
9.3 Critical
Published
Oct 1, 2026
Updated
Oct 1, 2026
Reserved
Aug 19, 2026

Read the record on cve.org

Description

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions

Scores

CVSSScoreVectorSource
4.09.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:Hkrcert

Weaknesses

  • CWE-284 Improper Access Control
  • CWE-306 Missing Authentication for Critical Function

Affected Products

ProductVersions
Genian NAC 5.0.75 LTS ReleaseGenians, Inc
  • 135823 to before 148667Affected
Genian NAC 5.0.85 Release StableGenians, Inc
  • 147181 to before 148666Affected
Genian NAC 5.0.86 ReleaseGenians, Inc
  • 148018 to before 148665Affected
Genian ZTNA 6.0.35 LTS ReleaseGenians, Inc
  • 135814 to before 148672Affected
Genian ZTNA 6.0.45 Release StableGenians, Inc
  • 147169 to before 148671Affected
Genian ZTNA 6.0.46 ReleaseGenians, Inc
  • 148028 to before 148670Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.