Back to CVE records
Medium 5.9Published Oct 1, 2026
CVE-2026-76147Genians, Inc Genian NAC/ZTNA Remote Code Execution
Updated under an hour ago ()
Does this affect you?
It affects Genians, Inc Genian NAC 4.0.175 Release and 8 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code
- CVSS
- 5.9 MEDIUM (v4.0, CNA)CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
- Weakness (CWE)
- CWE-862, CWE-807, CWE-22
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- krcert
- NVD analysis
- Deferred
- Record last updated
- Oct 1, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Genians, Inc Genian NAC 4.0.175 Release genians:genian_nac_4.0.175_release (from the name) | before 148817 | CNA record |
Genians, Inc Genian NAC 5.0.65 LTS Release genians:genian_nac_5.0.65_lts_release (from the name) | before 148816 | CNA record |
Genians, Inc Genian NAC 5.0.75 LTS Release genians:genian_nac_5.0.75_lts_release (from the name) | before 148815 | CNA record |
Genians, Inc Genian NAC 5.0.85 Release Stable genians:genian_nac_5.0.85_release_stable (from the name) | before 148814 | CNA record |
Genians, Inc Genian NAC 5.0.86 Release genians:genian_nac_5.0.86_release (from the name) | before 148813 | CNA record |
Genians, Inc Genian ZTNA 6.0.26 LTS Release genians:genian_ztna_6.0.26_lts_release (from the name) | before 148811 | CNA record |
Genians, Inc Genian ZTNA 6.0.35 LTS Release genians:genian_ztna_6.0.35_lts_release (from the name) | before 148810 | CNA record |
Genians, Inc Genian ZTNA 6.0.45 Release Stable genians:genian_ztna_6.0.45_release_stable (from the name) | before 148809 | CNA record |
Genians, Inc Genian ZTNA 6.0.46 Release genians:genian_ztna_6.0.46_release (from the name) | before 148807 | CNA record |
References
- https://docs.genians.com/release/ko/advisories/GN-SA-2026-001.html
- https://github.com/genians/security-research/security/advisories/GHSA-c883-w46g-6mg5
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.