CVE-2026-76147 PUBLISHED

Genians, Inc Genian NAC/ZTNA Remote Code Execution

Assigner: krcert
Reserved: 19.08.2026 Published: 01.10.2026 Updated: 01.10.2026

A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS Score: 5.9

Product Status

Vendor Genians, Inc
Product Genian NAC 4.0.175 Release
Versions Default: unaffected
  • affected from 0 to 148817 (excl.)
Vendor Genians, Inc
Product Genian NAC 5.0.65 LTS Release
Versions Default: unaffected
  • affected from 0 to 148816 (excl.)
Vendor Genians, Inc
Product Genian NAC 5.0.75 LTS Release
Versions Default: unaffected
  • affected from 0 to 148815 (excl.)
Vendor Genians, Inc
Product Genian NAC 5.0.85 Release Stable
Versions Default: unaffected
  • affected from 0 to 148814 (excl.)
Vendor Genians, Inc
Product Genian NAC 5.0.86 Release
Versions Default: unaffected
  • affected from 0 to 148813 (excl.)
Vendor Genians, Inc
Product Genian ZTNA 6.0.26 LTS Release
Versions Default: unaffected
  • affected from 0 to 148811 (excl.)
Vendor Genians, Inc
Product Genian ZTNA 6.0.35 LTS Release
Versions Default: unaffected
  • affected from 0 to 148810 (excl.)
Vendor Genians, Inc
Product Genian ZTNA 6.0.45 Release Stable
Versions Default: unaffected
  • affected from 0 to 148809 (excl.)
Vendor Genians, Inc
Product Genian ZTNA 6.0.46 Release
Versions Default: unaffected
  • affected from 0 to 148807 (excl.)

Solutions

Genian NAC 4.0.175 Release: update to Revision 148817 or later.

Genian NAC 5.0.65 LTS Release: update to Revision 148816 or later.

Genian NAC 5.0.75 LTS Release: update to Revision 148815 or later.

Genian NAC 5.0.85 Release Stable: update to Revision 148814 or later.

Genian NAC 5.0.86 Release: update to Revision 148813 or later.

Genian ZTNA 6.0.26 LTS Release: update to Revision 148811 or later.

Genian ZTNA 6.0.35 LTS Release: update to Revision 148810 or later.

Genian ZTNA 6.0.45 Release Stable: update to Revision 148809 or later.

Genian ZTNA 6.0.46 Release: update to Revision 148807 or later.

Credits

  • segyeong finder

References

Problem Types

  • CWE-862 CWE
  • CWE-807 CWE
  • CWE-22 CWE

Impacts

  • CAPEC-126