CVE-2026-76145: Genians, Inc Genian SSL PNS Improper Privilege Management
An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Genian SSL PNS frodo-core and watchcat-uito a version that resolves this vulnerability.Fixed in 5.0.0
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker needs high-level privileges before exploitation. They must be able to manipulate the permission column during CSV bulk user registration.
What is the impact of successful exploitation?
An attacker can escalate to super administrator privileges and force creation of an operating-system account.
Which deployment feature should be reviewed first?
Review access to CSV bulk user registration, particularly who can upload or modify CSV files and their permission-column values. Restrict this capability to trusted administrators until a remediation is available.