Medium severity · published Oct 1, 2026
CVE-2026-76147
Genians, Inc Genian NAC/ZTNA Remote Code Execution
5.9
CVSS
0.4%
EPSS
No
On KEV
Description
A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GN
Genian NAC 4.0.175 Release · Genians, Inc
before 148817 · source: vendor
GN
Genian NAC 5.0.65 LTS Release · Genians, Inc
before 148816 · source: vendor
GN
Genian NAC 5.0.75 LTS Release · Genians, Inc
before 148815 · source: vendor
GN
Genian NAC 5.0.85 Release Stable · Genians, Inc
before 148814 · source: vendor
GN
Genian NAC 5.0.86 Release · Genians, Inc
before 148813 · source: vendor
GZ
Genian ZTNA 6.0.26 LTS Release · Genians, Inc
before 148811 · source: vendor
GZ
Genian ZTNA 6.0.35 LTS Release · Genians, Inc
before 148810 · source: vendor
GZ
Genian ZTNA 6.0.45 Release Stable · Genians, Inc
before 148809 · source: vendor
GZ
Genian ZTNA 6.0.46 Release · Genians, Inc
before 148807 · source: vendor