Vulnerability · Published Oct 1, 2026 · Assigned by krcert
CVE-2026-76145Genians, Inc Genian SSL PNS Improper Privilege Management
High 7.5
In plain English
A high-severity privilege mismanagement in Genian SSL PNS (frodo-core) from Genians, Inc. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Severity (CVSS 4.0)7.5High
Exploit odds (30 days)0.2%top 86.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Genians, Inc | Genian SSL PNS (frodo-core) | 0 – before 5.0.0 |
| Genians, Inc | Genian SSL PNS (watchcat-ui) | 0 – before 5.0.0 |
Weakness: CWE-269 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L