Genians vulnerabilities

We track 8 vulnerabilities in Genians products across 15 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on October 1, 2026.

8vulnerabilities

4critical

4high

0exploited

8.8average CVSS score

Latest Genians vulnerabilities

8.4 High severity
Genian SSL PNS (xenics_auther): Improper Neutralization of Special Elements used in an OS Command
CVE-2026-76146Oct 1, 2026GeniansEPSS 1.93%
An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely
7.5 High severity
Genian SSL PNS (frodo-core): Improper Privilege Management
CVE-2026-76145Oct 1, 2026Genians
An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration
7.3 High severity
Genian SSL PNS (frodo-core): Missing Authorization
CVE-2026-76143Oct 1, 2026Genians
A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter.
9.3 Critical severity
Genian NAC 5.0.75 LTS Release: Improper Access Control
CVE-2026-76142Oct 1, 2026Genians
Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions
8.7 High severity
Improper input validation and Exposure of sensitive information through data queries…
CVE-2026-16520Aug 21, 2026Genians
Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Genian NAC V
9.8 Critical severity
Genian NAC V4.0: Improper Control of Generation of Code
CVE-2023-40252Aug 17, 2023Genians
Improper Control of Generation of Code ('Code Injection') vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Replace Trusted Executable.This issue affects Genian NAC V4.0: from V4.0.0 th
9.8 Critical severity
Genian NAC V4.0: Download of Code Without Integrity Check
CVE-2023-40254Aug 11, 2023Genians
Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Ge
9.8 Critical severity
Genian NAC V4.0: Improper Authentication
CVE-2023-40253Aug 11, 2023Genians
Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Authentication Abuse.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5