CVE-2026-76142
Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 148667, 148666, 148665, 148672, 148671, and 1 more
- Public exploit
- None on Exploit-DB
CISA SSVC
- Exploitation: none
- Automatable: yes
- Technical impact: partial
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions
Affected versions
- Genians, Inc Genian NAC 5.0.75 LTS Release
From 135823 · fixed in 148667
- Genians, Inc Genian NAC 5.0.85 Release Stable
From 147181 · fixed in 148666
- Genians, Inc Genian NAC 5.0.86 Release
From 148018 · fixed in 148665
- Genians, Inc Genian ZTNA 6.0.35 LTS Release
From 135814 · fixed in 148672
- Genians, Inc Genian ZTNA 6.0.45 Release Stable
From 147169 · fixed in 148671
- Genians, Inc Genian ZTNA 6.0.46 Release
From 148028 · fixed in 148670