// CVE · PUBLISHED 2026-10-01
CVE-2026-76142 Genians, Inc / Genian NAC 5.0.75 LTS Release · Genians, Inc / Genian NAC 5.0.85 Release Stable · Genians, Inc / Genian NAC 5.0.86 Release · +3
9.3 · CVSS 4.0 Critical
Description Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.
Details Products Genians, Inc / Genian NAC 5.0.75 LTS Release · Genians, Inc / Genian NAC 5.0.85 Release Stable · Genians, Inc / Genian NAC 5.0.86 Release · Genians, Inc / Genian ZTNA 6.0.35 LTS Release · Genians, Inc / Genian ZTNA 6.0.45 Release Stable · Genians, Inc / Genian ZTNA 6.0.46 Release Published 1 Oct 2026 Modified 1 Oct 2026 CVSS 9.3 Critical (v4.0) Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Score source vuln@krcert.or.kr CWE CWE-284 , CWE-306 Record status Deferred