CRITICAL 9.3 NVD

CVE-2026-76142

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions

References

https://docs.genians.com/release/ko/advisories/GN-SA-2026-002.html
https://github.com/genians/security-research/security/advisories/GHSA-qf3p-2jpg-3h95

Published: 2026-10-01 · Source: NVD · Feed updated: 2026-10-01

This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-10-01 via NVD.

Risk Timeline

CVE Disclosed2026-10-01 · -1 days ago

Remediation Resources

Official Advisory

docs.genians.com/release/ko/advisories/GN-SA-2026-002.html

GitHub

github.com/genians/security-research/security/advisories/GHSA-qf3p-2jp

vulnfeed aggregates 12641 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.