Vulnerability · Published Oct 1, 2026 · Assigned by krcert
CVE-2026-76147Genians, Inc Genian NAC/ZTNA Remote Code Execution
Medium 5.9
In plain English
A medium-severity missing authorization in Genian NAC 4.0.175 Release from Genians, Inc. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).
Severity (CVSS 4.0)5.9Medium
Exploit odds (30 days)0.4%top 65.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Genians, Inc | Genian NAC 4.0.175 Release | 0 – before 148817 |
| Genians, Inc | Genian NAC 5.0.65 LTS Release | 0 – before 148816 |
| Genians, Inc | Genian NAC 5.0.75 LTS Release | 0 – before 148815 |
| Genians, Inc | Genian NAC 5.0.85 Release Stable | 0 – before 148814 |
| Genians, Inc | Genian NAC 5.0.86 Release | 0 – before 148813 |
| Genians, Inc | Genian ZTNA 6.0.26 LTS Release | 0 – before 148811 |
| Genians, Inc | Genian ZTNA 6.0.35 LTS Release | 0 – before 148810 |
| Genians, Inc | Genian ZTNA 6.0.45 Release Stable | 0 – before 148809 |
| Genians, Inc | Genian ZTNA 6.0.46 Release | 0 – before 148807 |
Weakness: CWE-862, CWE-807, CWE-22 · Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N