CVE-2026-76142

published 2026-10-01

CVE-2026-76142: Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker…

Priority P2 68 critical 9.3 CVSS 4.0

AV N AC L AT N PR N UI N VC L VI H VA H SC L SI H SA H E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions

Affected

6 ranges

Vendor	Product	Version range	Fixed in
genians_inc	genian_nac_5.0.75_lts_release	>= 135823 < 148667	148667
genians_inc	genian_nac_5.0.85_release_stable	>= 147181 < 148666	148666
genians_inc	genian_nac_5.0.86_release	>= 148018 < 148665	148665
genians_inc	genian_ztna_6.0.35_lts_release	>= 135814 < 148672	148672
genians_inc	genian_ztna_6.0.45_release_stable	>= 147169 < 148671	148671
genians_inc	genian_ztna_6.0.46_release	>= 148028 < 148670	148670

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-284 CWE-306