High severity · published Oct 1, 2026
CVE-2026-76146
Genians, Inc Genian SSL PNS OS Command Injection
8.4
CVSS
1.9%
EPSS
No
On KEV
Description
An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GS
Genian SSL PNS (xenics_auther) · Genians, Inc
before 1.0.1 · source: vendor