CVE-2026-76147

Genians, Inc Genian NAC/ZTNA Remote Code Execution

Published Oct 1, 2026 CVSS 4.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Description
A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code

Remediation

Vendor Solution

Genian NAC 4.0.175 Release: update to Revision 148817 or later. Genian NAC 5.0.65 LTS Release: update to Revision 148816 or later. Genian NAC 5.0.75 LTS Release: update to Revision 148815 or later. Genian NAC 5.0.85 Release Stable: update to Revision 148814 or later. Genian NAC 5.0.86 Release: update to Revision 148813 or later. Genian ZTNA 6.0.26 LTS Release: update to Revision 148811 or later. Genian ZTNA 6.0.35 LTS Release: update to Revision 148810 or later. Genian ZTNA 6.0.45 Release Stable: update to Revision 148809 or later. Genian ZTNA 6.0.46 Release: update to Revision 148807 or later.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Genians
Genians genian Nac
Genians genian Ztna
Vendors & Products Genians
Genians genian Nac
Genians genian Ztna
Type Values Removed Values Added
Description A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code
Title Genians, Inc Genian NAC/ZTNA Remote Code Execution
Weaknesses CWE-22
CWE-807
CWE-862
References
Metrics cvssV4_0

{'score': 5.9, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
krcert
Published
Updated
Oct 1, 2026, 3:49 PM
Reserved
Aug 19, 2026, 4:13 AM
Status
Deferred
Published
Oct 1, 2026, 5:17 AM
Modified
Oct 1, 2026, 4:17 PM