Path Traversal Vulnerability in Genian NAC/ZTNA
CVE-2026-76147

5.9MEDIUM

Key Information:

Vendor

Genians, Inc

Status
Genian Nac 4.0.175 Release
Genian Nac 5.0.65 Lts Release
Genian Nac 5.0.75 Lts Release
Genian Nac 5.0.85 Release Stable
Vendor
CVE Published:
1 October 2026

What is CVE-2026-76147?

A path traversal vulnerability in the Genian NAC/ZTNA upgrade feature stems from inadequate authorization checks and lack of integrity validation. This flaw allows a remote attacker to exploit the system and execute arbitrary code, posing a significant risk to the integrity and security of the affected systems.

Affected Version(s)

Genian NAC 4.0.175 Release 0 < 148817

Genian NAC 5.0.65 LTS Release 0 < 148816

Genian NAC 5.0.75 LTS Release 0 < 148815

References

https://docs.genians.com/release/ko/advisories/GN-SA-2026...
https://github.com/genians/security-research/security/adv...

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

segyeong
.