Critical severity · published Oct 1, 2026
CVE-2026-76142
Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface
9.3
CVSS
0.3%
EPSS
No
On KEV
Description
Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GN
Genian NAC 5.0.75 LTS Release · Genians, Inc
135823 before 148667 · source: vendor
GN
Genian NAC 5.0.85 Release Stable · Genians, Inc
147181 before 148666 · source: vendor
GN
Genian NAC 5.0.86 Release · Genians, Inc
148018 before 148665 · source: vendor
GZ
Genian ZTNA 6.0.35 LTS Release · Genians, Inc
135814 before 148672 · source: vendor
GZ
Genian ZTNA 6.0.45 Release Stable · Genians, Inc
147169 before 148671 · source: vendor
GZ
Genian ZTNA 6.0.46 Release · Genians, Inc
148028 before 148670 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-76142
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-76142
docs.genians.com
https://docs.genians.com/release/ko/advisories/GN-SA-2026-002.html
github.com
https://github.com/genians/security-research/security/advisories/GHSA-qf3p-2jpg-3h95
More from Genian NAC 5.0.75 LTS Release
5.9
CVE-2026-76147
Genians, Inc Genian NAC/ZTNA Remote Code Execution