Improper Privilege Management in Genian SSL PNS by Genian
CVE-2026-76145

7.5HIGH

Key Information:

Vendor: Genians, Inc
Status: Genian Ssl Pns (frodo-core); Genian Ssl Pns (watchcat-ui)
Vendor: CVE Published:; 1 October 2026

🔔 Create Genians, Inc Vulnerability Alert

What is CVE-2026-76145?

An improper privilege management vulnerability in Genian SSL PNS allows an attacker to gain super administrator privileges. By exploiting this flaw, an unauthorized individual can manipulate the permission column during CSV bulk user registration, enabling the creation of an OS account without proper authorization. This vulnerability poses significant risks to user data integrity and system security.

Affected Version(s)

Genian SSL PNS (frodo-core) 0 < 5.0.0

Genian SSL PNS (watchcat-ui) 0 < 5.0.0

References

https://github.com/genians/security-research/security/adv...

CVSS V4

Score:

7.5

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

Physical

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 1, 2026
Vulnerability Reserved
Aug 19, 2026

CVE-2026-76145 Data

JSON