Unrestricted File Upload Vulnerability in Genian SSL PNS
CVE-2026-76144

1.8LOW

Key Information:

Vendor: Genians, Inc
Status: Genian Ssl Pns (frodo-core); Genian Ssl Pns (watchcat-ui)
Vendor: CVE Published:; 1 October 2026

🔔 Create Genians, Inc Vulnerability Alert

What is CVE-2026-76144?

An unrestricted file upload vulnerability exists in Genian SSL PNS due to insufficient validation of file extensions and integrity checks. This flaw allows attackers to upload potentially malicious files, which can compromise the security of the entire system. Organizations using this product should take immediate action to mitigate risks associated with unauthorized file uploads.

Affected Version(s)

Genian SSL PNS (frodo-core) 0 < 5.0.0

Genian SSL PNS (watchcat-ui) 0 < 5.0.0

References

https://github.com/genians/security-research/security/adv...

CVSS V4

Score:

1.8

Severity:

LOW

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Local

Attack Complexity:

High

Attack Required:

Physical

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 1, 2026
Vulnerability Reserved
Aug 19, 2026

CVE-2026-76144 Data

JSON