High severity · published Oct 1, 2026
CVE-2026-76145
Genians, Inc Genian SSL PNS Improper Privilege Management
7.5
CVSS
0.2%
EPSS
No
On KEV
Description
An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GS
Genian SSL PNS (frodo-core) · Genians, Inc
before 5.0.0 · source: vendor
GS
Genian SSL PNS (watchcat-ui) · Genians, Inc
before 5.0.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-76145
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-76145
github.com
https://github.com/genians/security-research/security/advisories/GHSA-8mjh-295r-5hf2
More from Genian SSL PNS (frodo-core)
7.3
CVE-2026-76143
Genians, Inc Genian SSL PNS Multi Factor Authentication Bypass
1.8
CVE-2026-76144
Genians, Inc Genian SSL PNS Unrestricted File Upload